Oct  7 23:56:01 2blog CRON[3449226]: (root) CMD (/sbin/checkvm.sh)
Oct  7 23:56:01 2blog CRON[3449227]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  7 23:56:01 2blog sendmail[3449242]: 697Fu1tI3449242: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071556.697Fu1tI3449242@2blog.ap2>, relay=root@localhost
Oct  7 23:56:01 2blog sm-mta[3449243]: 697Fu1xS3449243: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071556.697Fu1tI3449242@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  7 23:56:01 2blog sendmail[3449242]: 697Fu1tI3449242: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697Fu1xS3449243 Message accepted for delivery)
Oct  7 23:56:01 2blog sendmail[3449270]: 697Fu1OG3449270: from=root, size=494, class=0, nrcpts=1, msgid=<202610071556.697Fu1OG3449270@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  7 23:56:01 2blog sm-mta[3449271]: 697Fu1UB3449271: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071556.697Fu1OG3449270@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  7 23:56:01 2blog sendmail[3449270]: 697Fu1OG3449270: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697Fu1UB3449271 Message accepted for delivery)
Oct  7 23:56:01 2blog sm-mta[3449272]: 697Fu1UB3449271: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  7 23:56:03 2blog sm-mta[3449245]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  7 23:56:03 2blog sm-mta[3449245]: 697Fu1xS3449243: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1b], dsn=5.2.1, stat=User unknown
Oct  7 23:56:03 2blog sm-mta[3449245]: 697Fu1xS3449243: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct  7 23:56:03 2blog sm-mta[3449245]: 697Fu1xS3449243: 697Fu3xS3449245: DSN: Service unavailable
Oct  7 23:56:03 2blog sm-mta[3449245]: 697Fu3xS3449245: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  7 23:57:01 2blog CRON[3449304]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  7 23:58:01 2blog CRON[3449328]: (root) CMD (/sbin/checkvm.sh)
Oct  7 23:58:01 2blog CRON[3449329]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  7 23:58:01 2blog sendmail[3449344]: 697Fw1O53449344: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071558.697Fw1O53449344@2blog.ap2>, relay=root@localhost
Oct  7 23:58:01 2blog sm-mta[3449345]: 697Fw1nE3449345: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071558.697Fw1O53449344@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  7 23:58:01 2blog sendmail[3449344]: 697Fw1O53449344: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697Fw1nE3449345 Message accepted for delivery)
Oct  7 23:58:01 2blog sendmail[3449373]: 697Fw1t63449373: from=root, size=494, class=0, nrcpts=1, msgid=<202610071558.697Fw1t63449373@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  7 23:58:01 2blog sm-mta[3449374]: 697Fw17i3449374: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071558.697Fw1t63449373@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  7 23:58:01 2blog sendmail[3449373]: 697Fw1t63449373: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697Fw17i3449374 Message accepted for delivery)
Oct  7 23:58:01 2blog sm-mta[3449375]: 697Fw17i3449374: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  7 23:58:03 2blog sm-mta[3449348]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  7 23:58:03 2blog sm-mta[3449348]: 697Fw1nE3449345: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1b], dsn=5.2.1, stat=User unknown
Oct  7 23:58:04 2blog sm-mta[3449348]: 697Fw1nE3449345: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct  7 23:58:04 2blog sm-mta[3449348]: 697Fw1nE3449345: 697Fw4nE3449348: DSN: Service unavailable
Oct  7 23:58:04 2blog sm-mta[3449348]: 697Fw4nE3449348: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  7 23:59:01 2blog CRON[3449401]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:00:00 2blog systemd[1]: Starting Daily dpkg database backup service...
Oct  8 00:00:00 2blog systemd[1]: Starting Rotate log files...
Oct  8 00:00:00 2blog logrotate[3449439]: error: failed to rename /var/log/apache2/error.log to /var/log/apache2/error.log-20261008: No such file or directory
Oct  8 00:00:00 2blog systemd[1]: dpkg-db-backup.service: Deactivated successfully.
Oct  8 00:00:00 2blog systemd[1]: Finished Daily dpkg database backup service.
Oct  8 00:00:01 2blog CRON[3449519]: (root) CMD (/sbin/check_load.sh)
Oct  8 00:00:01 2blog CRON[3449520]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:00:01 2blog CRON[3449521]: (root) CMD (/sbin/checkvm.sh)
Oct  8 00:00:01 2blog CRON[3449522]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/libexec/sendmail/sendmail && /usr/share/sendmail/sendmail cron-msp)
Oct  8 00:00:01 2blog CRON[3449523]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct  8 00:00:01 2blog CRON[3449529]: (root) CMD (test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew)
Oct  8 00:00:01 2blog sendmail[3449573]: 697G01Lr3449573: from=root, size=317, class=0, nrcpts=1, msgid=<202610071600.697G01Lr3449573@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:00:01 2blog sendmail[3449583]: 697G01LE3449583: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071600.697G01LE3449583@2blog.ap2>, relay=root@localhost
Oct  8 00:00:01 2blog sm-mta[3449588]: 697G01V93449588: from=<root@2blog.ap2>, size=557, class=0, nrcpts=1, msgid=<202610071600.697G01Lr3449573@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:00:01 2blog sendmail[3449573]: 697G01Lr3449573: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G01V93449588 Message accepted for delivery)
Oct  8 00:00:01 2blog sm-mta[3449589]: 697G01e73449589: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071600.697G01LE3449583@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:00:01 2blog sm-mta[3449590]: 697G01V93449588: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30757, dsn=2.0.0, stat=Sent
Oct  8 00:00:01 2blog sendmail[3449583]: 697G01LE3449583: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G01e73449589 Message accepted for delivery)
Oct  8 00:00:01 2blog sendmail[3449618]: 697G012h3449618: from=root, size=494, class=0, nrcpts=1, msgid=<202610071600.697G012h3449618@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:00:01 2blog sm-mta[3449619]: 697G01KQ3449619: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071600.697G012h3449618@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:00:01 2blog sendmail[3449618]: 697G012h3449618: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G01KQ3449619 Message accepted for delivery)
Oct  8 00:00:01 2blog sm-mta[3449620]: 697G01KQ3449619: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  8 00:00:01 2blog systemd[1]: rsyslog.service: Sent signal SIGHUP to main process 3671246 (rsyslogd) on client request.
Oct  8 00:00:01 2blog systemd[1]: logrotate.service: Main process exited, code=exited, status=1/FAILURE
Oct  8 00:00:01 2blog systemd[1]: logrotate.service: Failed with result 'exit-code'.
Oct  8 00:00:01 2blog systemd[1]: Failed to start Rotate log files.
Oct  8 00:00:02 2blog sm-mta[3449593]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  8 00:00:02 2blog sm-mta[3449593]: 697G01e73449589: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c03:0:0:0:1b], dsn=5.2.1, stat=User unknown
Oct  8 00:00:03 2blog sm-mta[3449593]: 697G01e73449589: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c03:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct  8 00:00:03 2blog sm-mta[3449593]: 697G01e73449589: 697G03e73449593: DSN: Service unavailable
Oct  8 00:00:03 2blog sm-mta[3449593]: 697G03e73449593: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  8 00:00:05 2blog dbus-daemon[965]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.60825' (uid=0 pid=3449663 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct  8 00:00:05 2blog systemd[1]: Starting Time & Date Service...
Oct  8 00:00:05 2blog dbus-daemon[965]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct  8 00:00:05 2blog systemd[1]: Started Time & Date Service.
Oct  8 00:00:12 2blog crontab[3450371]: (root) LIST (root)
Oct  8 00:00:12 2blog crontab[3450404]: (root) LIST (root)
Oct  8 00:00:17 2blog crontab[3451319]: (root) LIST (root)
Oct  8 00:00:18 2blog crontab[3451401]: (root) LIST (www-data)
Oct  8 00:00:35 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct  8 00:01:01 2blog CRON[3454132]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:01:04 2blog host-agent: Report sent successfully
Oct  8 00:02:01 2blog CRON[3454188]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:02:01 2blog CRON[3454187]: (root) CMD (/sbin/checkvm.sh)
Oct  8 00:02:01 2blog CRON[3454189]: (root) CMD (/sbin/fail2ban.sh)
Oct  8 00:02:01 2blog systemd[1]: Started Fail2Ban Service.
Oct  8 00:02:01 2blog sendmail[3454207]: 697G21g03454207: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071602.697G21g03454207@2blog.ap2>, relay=root@localhost
Oct  8 00:02:01 2blog sm-mta[3454210]: 697G21FL3454210: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071602.697G21g03454207@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:02:01 2blog sendmail[3454207]: 697G21g03454207: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G21FL3454210 Message accepted for delivery)
Oct  8 00:02:01 2blog sendmail[3454239]: 697G21Yo3454239: from=root, size=494, class=0, nrcpts=1, msgid=<202610071602.697G21Yo3454239@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:02:01 2blog sm-mta[3454240]: 697G21733454240: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071602.697G21Yo3454239@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:02:01 2blog sendmail[3454239]: 697G21Yo3454239: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G21733454240 Message accepted for delivery)
Oct  8 00:02:01 2blog fail2ban-server[3454209]: 2026-10-08 00:02:01,416 fail2ban                [3454209]: ERROR   Failed during configuration: Have not found any log file for wordpress-login jail
Oct  8 00:02:01 2blog sm-mta[3454241]: 697G21733454240: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  8 00:02:01 2blog fail2ban-server[3454209]: 2026-10-08 00:02:01,431 fail2ban                [3454209]: ERROR   Async configuration of server failed
Oct  8 00:02:01 2blog systemd[1]: fail2ban.service: Main process exited, code=exited, status=255/EXCEPTION
Oct  8 00:02:01 2blog systemd[1]: fail2ban.service: Failed with result 'exit-code'.
Oct  8 00:02:01 2blog sm-mta[3454213]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  8 00:02:02 2blog sm-mta[3454213]: 697G21FL3454210: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c03:0:0:0:1b], dsn=5.2.1, stat=User unknown
Oct  8 00:02:02 2blog sm-mta[3454213]: 697G21FL3454210: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c03:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct  8 00:02:02 2blog sm-mta[3454213]: 697G21FL3454210: 697G22FL3454213: DSN: Service unavailable
Oct  8 00:02:02 2blog sm-mta[3454213]: 697G22FL3454213: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  8 00:02:18 2blog rsyslogd:  message repeated 2285 times: [cannot connect to portal.steps.tw:5140: Connection timed out [v8.2112.0 try https://www.rsyslog.com/e/2027 ]]
Oct  8 00:02:18 2blog rsyslogd: [origin software="rsyslogd" swVersion="8.2112.0" x-pid="3671246" x-info="https://www.rsyslog.com"] rsyslogd was HUPed
Oct  8 00:02:18 2blog rsyslogd: cannot connect to portal.steps.tw:5140: Connection timed out [v8.2112.0 try https://www.rsyslog.com/e/2027 ]
Oct  8 00:03:01 2blog CRON[3454266]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:04:01 2blog CRON[3454293]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:04:01 2blog CRON[3454294]: (root) CMD (/sbin/checkvm.sh)
Oct  8 00:04:02 2blog sendmail[3454308]: 697G42m43454308: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071604.697G42m43454308@2blog.ap2>, relay=root@localhost
Oct  8 00:04:02 2blog sm-mta[3454309]: 697G42oC3454309: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071604.697G42m43454308@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:04:02 2blog sendmail[3454308]: 697G42m43454308: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G42oC3454309 Message accepted for delivery)
Oct  8 00:04:02 2blog sendmail[3454338]: 697G42Nv3454338: from=root, size=494, class=0, nrcpts=1, msgid=<202610071604.697G42Nv3454338@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:04:02 2blog sm-mta[3454339]: 697G42rR3454339: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071604.697G42Nv3454338@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:04:02 2blog sendmail[3454338]: 697G42Nv3454338: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G42rR3454339 Message accepted for delivery)
Oct  8 00:04:03 2blog sm-mta[3454340]: 697G42rR3454339: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  8 00:04:03 2blog sm-mta[3454311]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  8 00:04:04 2blog sm-mta[3454311]: 697G42oC3454309: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c03:0:0:0:1b], dsn=5.2.1, stat=User unknown
Oct  8 00:04:05 2blog sm-mta[3454311]: 697G42oC3454309: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c03:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct  8 00:04:05 2blog sm-mta[3454311]: 697G42oC3454309: 697G45oC3454311: DSN: Service unavailable
Oct  8 00:04:05 2blog sm-mta[3454311]: 697G45oC3454311: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  8 00:05:02 2blog CRON[3454370]: (root) CMD (/sbin/check_load.sh)
Oct  8 00:05:02 2blog CRON[3454371]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct  8 00:05:02 2blog CRON[3454369]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:05:02 2blog sendmail[3454399]: 697G52EO3454399: from=root, size=317, class=0, nrcpts=1, msgid=<202610071605.697G52EO3454399@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:05:02 2blog dbus-daemon[965]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.60827' (uid=0 pid=3454415 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct  8 00:05:02 2blog systemd[1]: Starting Time & Date Service...
Oct  8 00:05:02 2blog sm-mta[3454416]: 697G52XN3454416: from=<root@2blog.ap2>, size=557, class=0, nrcpts=1, msgid=<202610071605.697G52EO3454399@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:05:02 2blog sendmail[3454399]: 697G52EO3454399: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G52XN3454416 Message accepted for delivery)
Oct  8 00:05:02 2blog sm-mta[3454418]: 697G52XN3454416: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30757, dsn=2.0.0, stat=Sent
Oct  8 00:05:02 2blog dbus-daemon[965]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct  8 00:05:02 2blog systemd[1]: Started Time & Date Service.
Oct  8 00:05:08 2blog crontab[3455126]: (root) LIST (root)
Oct  8 00:05:08 2blog crontab[3455159]: (root) LIST (root)
Oct  8 00:05:12 2blog crontab[3456073]: (root) LIST (root)
Oct  8 00:05:12 2blog crontab[3456155]: (root) LIST (www-data)
Oct  8 00:05:26 2blog host-agent: Report sent successfully
Oct  8 00:05:32 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct  8 00:06:01 2blog CRON[3458886]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:06:01 2blog CRON[3458887]: (root) CMD (/sbin/checkvm.sh)
Oct  8 00:06:01 2blog sendmail[3458901]: 697G61aC3458901: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071606.697G61aC3458901@2blog.ap2>, relay=root@localhost
Oct  8 00:06:02 2blog sm-mta[3458902]: 697G61qn3458902: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071606.697G61aC3458901@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:06:02 2blog sendmail[3458901]: 697G61aC3458901: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G61qn3458902 Message accepted for delivery)
Oct  8 00:06:02 2blog sendmail[3458929]: 697G62Tg3458929: from=root, size=494, class=0, nrcpts=1, msgid=<202610071606.697G62Tg3458929@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:06:02 2blog sm-mta[3458930]: 697G62Rv3458930: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071606.697G62Tg3458929@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:06:02 2blog sendmail[3458929]: 697G62Tg3458929: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G62Rv3458930 Message accepted for delivery)
Oct  8 00:06:02 2blog sm-mta[3458931]: 697G62Rv3458930: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  8 00:06:02 2blog sm-mta[3458904]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  8 00:06:03 2blog sm-mta[3458904]: 697G61qn3458902: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1a], dsn=5.2.1, stat=User unknown
Oct  8 00:06:03 2blog sm-mta[3458904]: 697G61qn3458902: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct  8 00:06:03 2blog sm-mta[3458904]: 697G61qn3458902: 697G63qn3458904: DSN: Service unavailable
Oct  8 00:06:03 2blog sm-mta[3458904]: 697G63qn3458904: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  7 23:37:45 2blog apache-access 140.111.67.10 - - [23/Sep/2026:20:29:32 +0800] "GET /" 301 273 "-" "-"
Oct  7 23:37:45 2blog apache-access 66.249.79.136 - - [23/Sep/2026:20:29:30 +0800] "GET /wp-login.php?key=cbz6z425&_wpnonce=&action=ilc_logout&redirect_to=https%3A%2F%2Fwww.aayyy.net%2Fgames%2F HTTP/1.1" 302 8242 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct  7 23:37:45 2blog apache-access 76.35.1.185 - - [23/Sep/2026:20:29:32 +0800] "GET /?s=VIPREG2024%2Bpromo%2Bcode%2Bin%2B1xbet%2BNorway HTTP/1.1" 200 10711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 23.23.213.182 - - [23/Sep/2026:20:29:32 +0800] "GET /wp-content/uploads/sites/2050/2025/02/?C=S;O%3DA HTTP/1.1" 200 1111 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2a02:c202:2359:871::1 - - [23/Sep/2026:20:29:32 +0800] "GET /rainbow123/wp-content/uploads/sites/3901/2025/10/DSCN9140-300x225.jpg HTTP/1.1" 200 20401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:20:29:33 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct  7 23:37:45 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:20:29:33 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f802:19:: - - [23/Sep/2026:20:29:33 +0800] "GET /6440/2013/08/20/%e8%a8%82%e5%ae%9a102%e5%b9%b4%e5%ba%a6%e5%8c%96%e7%b3%9e%e6%b1%a0%e6%b8%85%e7%90%86%e6%99%82%e9%96%93%e4%b8%a6%e7%a2%ba%e5%af%a6%e5%9f%b7%e8%a1%8c/ HTTP/1.1" 200 16326 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f80e:38:: - - [23/Sep/2026:20:29:33 +0800] "GET /wp-content/uploads/sites/2235/6440/6440-1570355.png HTTP/1.1" 200 91141 "https://2blog.ilc.edu.tw/6440/2013/08/20/%e8%a8%82%e5%ae%9a102%e5%b9%b4%e5%ba%a6%e5%8c%96%e7%b3%9e%e6%b1%a0%e6%b8%85%e7%90%86%e6%99%82%e9%96%93%e4%b8%a6%e7%a2%ba%e5%af%a6%e5%9f%b7%e8%a1%8c/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f802:49:: - - [23/Sep/2026:20:29:34 +0800] "GET /wp-content/uploads/sites/2235/6440/6440-2181752.jpg HTTP/1.1" 200 29782 "https://2blog.ilc.edu.tw/6440/2013/08/20/%e8%a8%82%e5%ae%9a102%e5%b9%b4%e5%ba%a6%e5%8c%96%e7%b3%9e%e6%b1%a0%e6%b8%85%e7%90%86%e6%99%82%e9%96%93%e4%b8%a6%e7%a2%ba%e5%af%a6%e5%9f%b7%e8%a1%8c/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f802:28:: - - [23/Sep/2026:20:29:34 +0800] "POST /6440/wp-json/ilc-summary/v1/popular-posts HTTP/1.1" 201 6066 "https://2blog.ilc.edu.tw/6440/2013/08/20/%e8%a8%82%e5%ae%9a102%e5%b9%b4%e5%ba%a6%e5%8c%96%e7%b3%9e%e6%b1%a0%e6%b8%85%e7%90%86%e6%99%82%e9%96%93%e4%b8%a6%e7%a2%ba%e5%af%a6%e5%9f%b7%e8%a1%8c/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f802:8:: - - [23/Sep/2026:20:29:34 +0800] "GET /wp-content/uploads/sites/2235/6440/6440-2181756.jpg HTTP/1.1" 200 30165 "https://2blog.ilc.edu.tw/6440/2013/08/20/%e8%a8%82%e5%ae%9a102%e5%b9%b4%e5%ba%a6%e5%8c%96%e7%b3%9e%e6%b1%a0%e6%b8%85%e7%90%86%e6%99%82%e9%96%93%e4%b8%a6%e7%a2%ba%e5%af%a6%e5%9f%b7%e8%a1%8c/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f802:28:: - - [23/Sep/2026:20:29:34 +0800] "GET /6440/author/yuyu/page/28/ HTTP/1.1" 200 16135 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 35.202.141.231 - - [23/Sep/2026:20:29:34 +0800] "GET /32745/2021/07/10/%E6%98%AF%E5%95%A5%E4%BA%BA%E8%AC%9B%E9%81%8E/ HTTP/1.1" 200 92301 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 34.231.77.232 - - [23/Sep/2026:20:29:36 +0800] "GET /wp-content/uploads/sites/857/2020/10/?C=S;O%3DA HTTP/1.1" 200 1112 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 140.111.67.10 - - [23/Sep/2026:20:29:37 +0800] "GET /" 301 273 "-" "-"
Oct  7 23:37:45 2blog apache-access 84.37.240.208 - - [23/Sep/2026:20:29:37 +0800] "GET /355/wp-content/uploads/sites/2571/2021/11/1106-5-300x150.png HTTP/1.1" 200 89704 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access ::1 - - [23/Sep/2026:20:29:37 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct  7 23:37:45 2blog apache-access 34.170.117.47 - - [23/Sep/2026:20:29:37 +0800] "GET /6093/2010/11/24/%E8%BD%89%E7%9F%A5%E8%A1%8C%E6%94%BF%E9%99%A2%E7%92%B0%E5%A2%83%E4%BF%9D%E8%AD%B7%E7%BD%B2%E5%BE%A9%E6%95%99%E8%82%B2%E9%83%A8%E6%9C%89%E9%97%9C%E5%AD%B8%E6%A0%A1%E5%AF%A6%E9%A9%97%E5%A0%B4%E6%89%80/ HTTP/1.1" 200 20364 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:20:29:38 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct  7 23:37:45 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:20:29:38 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct  7 23:37:45 2blog apache-access 2a03:2880:f802:11:: - - [23/Sep/2026:20:29:37 +0800] "GET /6537/wp-json/wp/v2/posts/4984 HTTP/1.1" 200 12708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
Oct  7 23:37:45 2blog apache-access 34.10.108.251 - - [23/Sep/2026:20:29:38 +0800] "GET /10889/category/c-4149/c-31310/page/14/ HTTP/1.1" 200 15714 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 40.77.167.63 - - [23/Sep/2026:20:29:39 +0800] "GET /1003/?s=cuales+son+los+10+mandamientos+segun+la+biblia HTTP/1.1" 200 9311 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 66.249.79.163 - - [23/Sep/2026:20:29:39 +0800] "GET /wp-content/uploads/sites/304/6047/6047-525086.gif HTTP/1.1" 200 8736 "-" "Googlebot-Image/1.0"
Oct  7 23:37:45 2blog apache-access 2001:288:a213:1:4053:33f3:c52a:43db - - [23/Sep/2026:20:29:37 +0800] "POST /26150/?customize_changeset_uuid=0a12c1b1-9816-4d81-bd83-7682f9ed8674&customize_theme=oceanwp-child-theme-master2&customize_messenger_channel=preview-12&customize_autosaved=on HTTP/1.1" 200 57147 "https://2blog.ilc.edu.tw/26150/wp-admin/customize.php?return=%2F26150%2Fwp-admin%2Findex.php&autofocus%5Bcontrol%5D=header_image" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2a03:2880:7ff:9:: - - [23/Sep/2026:20:29:40 +0800] "GET /blog/templates/summary/openid_imgs/tn.png HTTP/1.1" 301 1115 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
Oct  7 23:37:45 2blog apache-access 2a03:2880:1dff:62:: - - [23/Sep/2026:20:29:39 +0800] "GET /dashen/wp-content/uploads/sites/485/2019/06/cropped-P_20190606_200252_NT.jpg HTTP/1.1" 200 287307 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
Oct  7 23:37:45 2blog apache-access 66.249.71.69 - - [23/Sep/2026:20:29:40 +0800] "GET / HTTP/1.1" 200 26294 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct  7 23:37:45 2blog apache-access 52.70.138.176 - - [23/Sep/2026:20:29:40 +0800] "GET /wp-content/uploads/sites/3048/2022/11/?C=N;O%3DA HTTP/1.1" 200 1113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2a03:2880:7ff:2:: - - [23/Sep/2026:20:29:41 +0800] "GET /blog/gallery/29301/29301-3626112.jpg HTTP/1.1" 301 1105 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
Oct  7 23:37:45 2blog apache-access 35.184.42.130 - - [23/Sep/2026:20:29:41 +0800] "GET /6422/2019/ HTTP/1.1" 200 15225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 136.116.231.101 - - [23/Sep/2026:20:29:41 +0800] "GET /24/2013/10/28/%E5%84%AA%E8%89%AF%E8%A9%A6%E9%A1%8C%E7%94%84%E9%81%B8%E6%B4%BB%E5%8B%95/ HTTP/1.1" 200 45378 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 211.22.184.58 - - [23/Sep/2026:20:29:41 +0800] "HEAD /1003/feed/ HTTP/1.1" 200 5277 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/538.1 (KHTML, like Gecko) QuiteRSS/0.18.12 Safari/538.1"
Oct  7 23:37:45 2blog apache-access 211.22.184.58 - - [23/Sep/2026:20:29:41 +0800] "GET /1003/feed/ HTTP/1.1" 200 4252 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/538.1 (KHTML, like Gecko) QuiteRSS/0.18.12 Safari/538.1"
Oct  7 23:37:45 2blog apache-access 2a03:2880:7ff:4e:: - - [23/Sep/2026:20:29:41 +0800] "GET /blog/templates/summary/openid_imgs/tn.png HTTP/1.1" 301 1115 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
Oct  7 23:37:45 2blog apache-access 140.111.67.10 - - [23/Sep/2026:20:29:42 +0800] "GET /" 301 273 "-" "-"
Oct  7 23:37:45 2blog apache-access 64.57.131.211 - - [23/Sep/2026:20:29:42 +0800] "GET /wp-content/uploads/sites/2050/3288/3288-1965323.jpg HTTP/1.1" 200 24920 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2a03:2880:7ff:58:: - - [23/Sep/2026:20:29:42 +0800] "GET /blog/gallery/29301/29301-3626112.jpg HTTP/1.1" 404 25478 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
Oct  7 23:37:45 2blog apache-access 2a02:c202:2358:9675::1 - - [23/Sep/2026:20:29:42 +0800] "GET /blog/gallery/1377/previews/1377-211714.jpg HTTP/1.1" 404 25422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct  7 23:37:45 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:20:29:43 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct  8 00:07:01 2blog CRON[3458980]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:08:01 2blog CRON[3459006]: (root) CMD (/sbin/checkvm.sh)
Oct  8 00:08:01 2blog CRON[3459007]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  8 00:08:01 2blog sendmail[3459022]: 697G816e3459022: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610071608.697G816e3459022@2blog.ap2>, relay=root@localhost
Oct  8 00:08:01 2blog sm-mta[3459023]: 697G81BB3459023: from=<root@2blog.ap2>, size=462, class=0, nrcpts=2, msgid=<202610071608.697G816e3459022@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:08:01 2blog sendmail[3459022]: 697G816e3459022: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G81BB3459023 Message accepted for delivery)
Oct  8 00:08:02 2blog sendmail[3459050]: 697G82tF3459050: from=root, size=494, class=0, nrcpts=1, msgid=<202610071608.697G82tF3459050@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  8 00:08:02 2blog sm-mta[3459051]: 697G828Q3459051: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610071608.697G82tF3459050@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  8 00:08:02 2blog sendmail[3459050]: 697G82tF3459050: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (697G828Q3459051 Message accepted for delivery)
Oct  8 00:08:02 2blog sm-mta[3459052]: 697G828Q3459051: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct  8 00:08:02 2blog sm-mta[3459025]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  8 00:08:02 2blog sm-mta[3459025]: 697G81BB3459023: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1a], dsn=5.2.1, stat=User unknown
Oct  8 00:08:03 2blog sm-mta[3459025]: 697G81BB3459023: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150462, relay=aspmx.l.google.com. [IPv6:2404:6800:4008:c04:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct  8 00:08:03 2blog sm-mta[3459025]: 697G81BB3459023: 697G83BB3459025: DSN: Service unavailable
Oct  8 00:08:03 2blog sm-mta[3459025]: 697G83BB3459025: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  8 00:09:00 2blog systemd[1]: Starting Clean php session files...
Oct  8 00:09:00 2blog systemd[1]: phpsessionclean.service: Deactivated successfully.
Oct  8 00:09:00 2blog systemd[1]: Finished Clean php session files.