Oct 10 21:50:01 2blog sm-mta[572954]: 69ADo17r572954: from=<root@2blog.ap2>, size=557, class=0, nrcpts=1, msgid=<202610101350.69ADo11E572934@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:50:01 2blog sendmail[572934]: 69ADo11E572934: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADo17r572954 Message accepted for delivery)
Oct 10 21:50:01 2blog dbus-daemon[967]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct 10 21:50:01 2blog systemd[1]: Started Time & Date Service.
Oct 10 21:50:01 2blog sm-mta[572979]: 69ADo17r572954: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30757, dsn=2.0.0, stat=Sent
Oct 10 21:50:01 2blog sendmail[572986]: 69ADo1uY572986: from=root, size=494, class=0, nrcpts=1, msgid=<202610101350.69ADo1uY572986@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:50:02 2blog sm-mta[573014]: 69ADo1bq573014: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610101350.69ADo1uY572986@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:50:02 2blog sendmail[572986]: 69ADo1uY572986: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADo1bq573014 Message accepted for delivery)
Oct 10 21:50:02 2blog sm-mta[573020]: 69ADo1bq573014: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct 10 21:50:05 2blog sendmail[573258]: 69ADo5Y5573258: from=root, size=481, class=0, nrcpts=1, msgid=<202610101350.69ADo5Y5573258@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:50:06 2blog sm-mta[573269]: 69ADo51q573269: from=<root@2blog.ap2>, size=721, class=0, nrcpts=1, msgid=<202610101350.69ADo5Y5573258@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:50:06 2blog sendmail[573258]: 69ADo5Y5573258: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30481, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADo51q573269 Message accepted for delivery)
Oct 10 21:50:06 2blog sm-mta[573282]: 69ADo51q573269: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30921, dsn=2.0.0, stat=Sent
Oct 10 21:50:07 2blog crontab[573783]: (root) LIST (root)
Oct 10 21:50:08 2blog crontab[573816]: (root) LIST (root)
Oct 10 21:50:12 2blog crontab[574805]: (root) LIST (root)
Oct 10 21:50:12 2blog crontab[574887]: (root) LIST (www-data)
Oct 10 21:50:26 2blog host-agent: Report sent successfully
Oct 10 21:50:31 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct 10 21:51:01 2blog CRON[577579]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:52:01 2blog CRON[577609]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:52:01 2blog CRON[577610]: (root) CMD (/sbin/checkvm.sh)
Oct 10 21:52:02 2blog sendmail[577648]: 69ADq2jF577648: from=root, size=494, class=0, nrcpts=1, msgid=<202610101352.69ADq2jF577648@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:52:03 2blog sm-mta[577649]: 69ADq209577649: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610101352.69ADq2jF577648@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:52:03 2blog sendmail[577648]: 69ADq2jF577648: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADq209577649 Message accepted for delivery)
Oct 10 21:52:03 2blog sm-mta[577650]: 69ADq209577649: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct 10 21:53:01 2blog CRON[577683]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:54:01 2blog CRON[577717]: (root) CMD (/sbin/checkvm.sh)
Oct 10 21:54:01 2blog CRON[577716]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:54:01 2blog sendmail[577754]: 69ADs1TJ577754: from=root, size=494, class=0, nrcpts=1, msgid=<202610101354.69ADs1TJ577754@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:54:01 2blog sm-mta[577755]: 69ADs1DB577755: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610101354.69ADs1TJ577754@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:54:01 2blog sendmail[577754]: 69ADs1TJ577754: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADs1DB577755 Message accepted for delivery)
Oct 10 21:54:01 2blog sm-mta[577756]: 69ADs1DB577755: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct 10 21:55:02 2blog CRON[577783]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct 10 21:55:02 2blog CRON[577785]: (root) CMD (/sbin/check_load.sh)
Oct 10 21:55:02 2blog CRON[577784]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:55:02 2blog sendmail[577813]: 69ADt2iC577813: from=root, size=317, class=0, nrcpts=1, msgid=<202610101355.69ADt2iC577813@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:55:02 2blog dbus-daemon[967]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.33415' (uid=0 pid=577830 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct 10 21:55:02 2blog systemd[1]: Starting Time & Date Service...
Oct 10 21:55:02 2blog sm-mta[577825]: 69ADt2OR577825: from=<root@2blog.ap2>, size=557, class=0, nrcpts=1, msgid=<202610101355.69ADt2iC577813@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:55:02 2blog sendmail[577813]: 69ADt2iC577813: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADt2OR577825 Message accepted for delivery)
Oct 10 21:55:02 2blog dbus-daemon[967]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct 10 21:55:02 2blog systemd[1]: Started Time & Date Service.
Oct 10 21:55:02 2blog sm-mta[577832]: 69ADt2OR577825: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30757, dsn=2.0.0, stat=Sent
Oct 10 21:55:07 2blog crontab[578627]: (root) LIST (root)
Oct 10 21:55:07 2blog crontab[578660]: (root) LIST (root)
Oct 10 21:55:11 2blog crontab[579657]: (root) LIST (root)
Oct 10 21:55:11 2blog crontab[579739]: (root) LIST (www-data)
Oct 10 21:55:23 2blog host-agent: Report sent successfully
Oct 10 21:55:32 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct 10 21:56:01 2blog CRON[582456]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:56:01 2blog CRON[582455]: (root) CMD (/sbin/checkvm.sh)
Oct 10 21:56:01 2blog sendmail[582493]: 69ADu1hm582493: from=root, size=494, class=0, nrcpts=1, msgid=<202610101356.69ADu1hm582493@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:56:02 2blog sm-mta[582494]: 69ADu1UT582494: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610101356.69ADu1hm582493@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:56:02 2blog sendmail[582493]: 69ADu1hm582493: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADu1UT582494 Message accepted for delivery)
Oct 10 21:56:02 2blog sm-mta[582495]: 69ADu1UT582494: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
Oct 10 21:57:01 2blog CRON[582514]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:58:01 2blog CRON[582537]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 21:58:01 2blog CRON[582538]: (root) CMD (/sbin/checkvm.sh)
Oct 10 21:58:01 2blog sendmail[582575]: 69ADw14p582575: from=root, size=494, class=0, nrcpts=1, msgid=<202610101358.69ADw14p582575@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 21:58:01 2blog sm-mta[582576]: 69ADw1gR582576: from=<root@2blog.ap2>, size=734, class=0, nrcpts=1, msgid=<202610101358.69ADw14p582575@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 10 21:58:01 2blog sendmail[582575]: 69ADw14p582575: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69ADw1gR582576 Message accepted for delivery)
Oct 10 21:58:01 2blog sm-mta[582577]: 69ADw1gR582576: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30934, dsn=2.0.0, stat=Sent
cpts=2, msgid=<202610081906.698J61ml839739@2blog.ap2>, relay=root@localhost
Oct  9 03:06:01 2blog sm-mta[839741]: 698J61e5839741: from=<root@2blog.ap2>, size=460, class=0, nrcpts=2, msgid=<202610081906.698J61ml839739@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:06:01 2blog sendmail[839739]: 698J61ml839739: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698J61e5839741 Message accepted for delivery)
Oct  9 03:06:02 2blog sendmail[839769]: 698J62aN839769: from=root, size=494, class=0, nrcpts=1, msgid=<202610081906.698J62aN839769@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:06:02 2blog sm-mta[839770]: 698J62DU839770: from=<root@2blog.ap2>, size=732, class=0, nrcpts=1, msgid=<202610081906.698J62aN839769@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:06:02 2blog sendmail[839769]: 698J62aN839769: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698J62DU839770 Message accepted for delivery)
Oct  9 03:06:02 2blog sm-mta[839771]: 698J62DU839770: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30931, dsn=2.0.0, stat=Sent
Oct  9 03:06:07 2blog sm-mta[839743]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  9 03:06:07 2blog sm-mta[839743]: 698J61e5839741: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:06, xdelay=00:00:06, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c05:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct  9 03:06:08 2blog sm-mta[839743]: 698J61e5839741: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:07, xdelay=00:00:07, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c05:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct  9 03:06:08 2blog sm-mta[839743]: 698J61e5839741: 698J68e5839743: DSN: Service unavailable
Oct  9 03:06:08 2blog sm-mta[839743]: 698J68e5839743: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  9 03:06:51 2blog sendmail[839837]: 698J6pHI839837: from=root, size=6615508, class=0, nrcpts=1, msgid=<202610081906.698J6pHI839837@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:06:51 2blog sm-mta[839838]: 698J6p0i839838: from=<root@2blog.ap2>, size=6615746, class=0, nrcpts=1, msgid=<202610081906.698J6pHI839837@2blog.ap2>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:06:51 2blog sendmail[839837]: 698J6pHI839837: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=6645508, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698J6p0i839838 Message accepted for delivery)
Oct  9 03:06:51 2blog sm-mta[839839]: 698J6p0i839838: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=6645945, dsn=2.0.0, stat=Sent
Oct  9 03:07:01 2blog CRON[839845]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:08:01 2blog CRON[839893]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:08:01 2blog CRON[839894]: (root) CMD (/sbin/checkvm.sh)
Oct  9 03:08:01 2blog sendmail[839908]: 698J8167839908: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610081908.698J8167839908@2blog.ap2>, relay=root@localhost
Oct  9 03:08:01 2blog sm-mta[839910]: 698J81nC839910: from=<root@2blog.ap2>, size=460, class=0, nrcpts=2, msgid=<202610081908.698J8167839908@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:08:01 2blog sendmail[839908]: 698J8167839908: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698J81nC839910 Message accepted for delivery)
Oct  9 03:08:02 2blog sm-mta[839912]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  9 03:08:02 2blog sendmail[839937]: 698J82i8839937: from=root, size=494, class=0, nrcpts=1, msgid=<202610081908.698J82i8839937@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:08:02 2blog sm-mta[839938]: 698J82HK839938: from=<root@2blog.ap2>, size=732, class=0, nrcpts=1, msgid=<202610081908.698J82i8839937@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:08:02 2blog sendmail[839937]: 698J82i8839937: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698J82HK839938 Message accepted for delivery)
Oct  9 03:08:02 2blog sm-mta[839939]: 698J82HK839938: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30931, dsn=2.0.0, stat=Sent
Oct  9 03:08:03 2blog sm-mta[839912]: 698J81nC839910: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c11:0:0:0:1b], dsn=5.1.1, stat=User unknown
Oct  9 03:08:03 2blog sm-mta[839912]: 698J81nC839910: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c11:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct  9 03:08:03 2blog sm-mta[839912]: 698J81nC839910: 698J83nC839912: DSN: Service unavailable
Oct  9 03:08:03 2blog sm-mta[839912]: 698J83nC839912: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  9 03:09:00 2blog systemd[1]: Starting Clean php session files...
Oct  9 03:09:00 2blog systemd[1]: phpsessionclean.service: Deactivated successfully.
Oct  9 03:09:00 2blog systemd[1]: Finished Clean php session files.
Oct  9 03:09:01 2blog CRON[840070]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Oct  9 03:09:01 2blog CRON[840071]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:10:01 2blog CRON[840161]: (root) CMD (/sbin/check_load.sh)
Oct  9 03:10:01 2blog CRON[840162]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct  9 03:10:01 2blog CRON[840160]: (root) CMD (/sbin/checkvm.sh)
Oct  9 03:10:01 2blog CRON[840166]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:10:01 2blog CRON[840182]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r)
Oct  9 03:10:01 2blog sendmail[840198]: 698JA1Vh840198: from=root, size=317, class=0, nrcpts=1, msgid=<202610081910.698JA1Vh840198@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:10:01 2blog dbus-daemon[965]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.61565' (uid=0 pid=840214 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct  9 03:10:01 2blog systemd[1]: Starting Time & Date Service...
Oct  9 03:10:01 2blog sm-mta[840209]: 698JA1O6840209: from=<root@2blog.ap2>, size=555, class=0, nrcpts=1, msgid=<202610081910.698JA1Vh840198@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:10:01 2blog sendmail[840198]: 698JA1Vh840198: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JA1O6840209 Message accepted for delivery)
Oct  9 03:10:01 2blog sm-mta[840216]: 698JA1O6840209: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30754, dsn=2.0.0, stat=Sent
Oct  9 03:10:01 2blog dbus-daemon[965]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct  9 03:10:01 2blog systemd[1]: Started Time & Date Service.
Oct  9 03:10:02 2blog sendmail[840257]: 698JA2hb840257: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610081910.698JA2hb840257@2blog.ap2>, relay=root@localhost
Oct  9 03:10:02 2blog sm-mta[840263]: 698JA2Z9840263: from=<root@2blog.ap2>, size=460, class=0, nrcpts=2, msgid=<202610081910.698JA2hb840257@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:10:02 2blog sendmail[840257]: 698JA2hb840257: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JA2Z9840263 Message accepted for delivery)
Oct  9 03:10:02 2blog sendmail[840323]: 698JA20d840323: from=root, size=494, class=0, nrcpts=1, msgid=<202610081910.698JA20d840323@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:10:02 2blog sm-mta[840324]: 698JA2vL840324: from=<root@2blog.ap2>, size=732, class=0, nrcpts=1, msgid=<202610081910.698JA20d840323@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:10:02 2blog sendmail[840323]: 698JA20d840323: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JA2vL840324 Message accepted for delivery)
Oct  9 03:10:03 2blog sm-mta[840283]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  9 03:10:03 2blog sm-mta[840328]: 698JA2vL840324: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30931, dsn=2.0.0, stat=Sent
Oct  9 03:10:04 2blog sm-mta[840283]: 698JA2Z9840263: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c05:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct  9 03:10:04 2blog sm-mta[840283]: 698JA2Z9840263: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c05:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct  9 03:10:04 2blog sm-mta[840283]: 698JA2Z9840263: 698JA4Z9840283: DSN: Service unavailable
Oct  9 03:10:05 2blog sm-mta[840283]: 698JA4Z9840283: to=<root@2blog.ap2>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  9 03:10:15 2blog crontab[840974]: (root) LIST (root)
Oct  9 03:10:15 2blog crontab[841008]: (root) LIST (root)
Oct  9 03:10:18 2blog crontab[841927]: (root) LIST (root)
Oct  9 03:10:18 2blog crontab[842011]: (root) LIST (www-data)
Oct  9 03:10:31 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct  9 03:10:37 2blog host-agent: Report sent successfully
Oct  9 03:11:01 2blog CRON[844786]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:12:01 2blog CRON[844852]: (root) CMD (/sbin/checkvm.sh)
Oct  9 03:12:01 2blog CRON[844853]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:12:02 2blog sendmail[844867]: 698JC2ME844867: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610081912.698JC2ME844867@2blog.ap2>, relay=root@localhost
Oct  9 03:12:02 2blog sm-mta[844868]: 698JC2qA844868: from=<root@2blog.ap2>, size=460, class=0, nrcpts=2, msgid=<202610081912.698JC2ME844867@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:12:02 2blog sendmail[844867]: 698JC2ME844867: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JC2qA844868 Message accepted for delivery)
Oct  9 03:12:02 2blog sendmail[844895]: 698JC2SU844895: from=root, size=494, class=0, nrcpts=1, msgid=<202610081912.698JC2SU844895@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:12:02 2blog sm-mta[844896]: 698JC2jm844896: from=<root@2blog.ap2>, size=732, class=0, nrcpts=1, msgid=<202610081912.698JC2SU844895@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:12:02 2blog sendmail[844895]: 698JC2SU844895: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JC2jm844896 Message accepted for delivery)
Oct  9 03:12:02 2blog sm-mta[844897]: 698JC2jm844896: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30931, dsn=2.0.0, stat=Sent
Oct  9 03:12:03 2blog sm-mta[844870]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  9 03:12:03 2blog sm-mta[844870]: 698JC2qA844868: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c1b:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct  9 03:12:04 2blog sm-mta[844870]: 698JC2qA844868: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c1b:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct  9 03:12:04 2blog sm-mta[844870]: 698JC2qA844868: 698JC4qA844870: DSN: Service unavailable
Oct  9 03:12:04 2blog sm-mta[844870]: 698JC4qA844870: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  9 02:20:41 2blog apache-access 140.111.67.10 - - [23/Sep/2026:21:58:52 +0800] "GET /" 301 273 "-" "-"
Oct  9 02:20:41 2blog apache-access 143.20.253.130 - - [23/Sep/2026:21:58:51 +0800] "GET /2024/07/09/%E8%BD%89%E7%9F%A5-113%E5%AD%B8%E5%B9%B4%E5%BA%A6%E9%AB%98%E7%B4%9A%E4%B8%AD%E7%AD%89%E5%AD%B8%E6%A0%A1%E7%89%B9%E8%89%B2%E6%8B%9B%E7%94%9F%E5%B0%88%E6%A5%AD%E7%BE%A4%E7%A7%91%E7%94%84%E9%81%B8/ HTTP/1.1" 200 46272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0.1 Safari/605.1.15"
Oct  9 02:20:41 2blog apache-access ::1 - - [23/Sep/2026:21:58:52 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct  9 02:20:41 2blog apache-access 64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 136.116.13.170 - - [23/Sep/2026:21:58:49 +0800] "GET /3860/2012/08/19/%E4%B8%83%E6%9C%88%E5%AD%9D%E9%81%93%E6%9C%88/ HTTP/1.1" 200 30681 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 140.111.67.10 - - [23/Sep/2026:21:58:50 +0800] "GET /" 301 273 "-" "-"
Oct  9 02:20:41 2blog apache-access 34.78.18.190 - - [23/Sep/2026:21:58:50 +0800] "GET /%E5%AD%B8%E7%94%9F%E5%B0%88%E5%8D%80/ HTTP/1.1" 200 23948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.156.91.76 - - [23/Sep/2026:21:58:50 +0800] "GET /e%E5%AD%B8%E9%99%A2/%E6%95%99%E5%AD%B8%E8%B3%87%E6%BA%90-%E7%B6%9C%E5%90%88%E9%A0%98%E5%9F%9F/ HTTP/1.1" 200 24081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 35.195.161.42 - - [23/Sep/2026:21:58:50 +0800] "GET /%E5%AE%9C%E8%98%AD%E7%B8%A3%E9%98%B2%E7%96%AB%E5%B0%88%E5%8D%80/ HTTP/1.1" 200 24156 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.156.65.7 - - [23/Sep/2026:21:58:50 +0800] "GET /%E9%98%B2%E7%96%AB%E5%B0%88%E5%8D%80/ HTTP/1.1" 200 23762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:21:58:51 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::66:125 - - [23/Sep/2026:21:58:51 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct  9 02:20:41 2blog apache-access 170.23.24.33 - - [23/Sep/2026:21:58:51 +0800] "GET /blog/gallery/2406/2406-838416.jpg HTTP/1.1" 301 1099 "http://blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.156.7.120 - - [23/Sep/2026:21:58:51 +0800] "GET /wp-login.php?redirect_to=https://www.tles.ilc.edu.tw/wp-admin&ilc_multi=Y&ilc_blog_id=1279 HTTP/1.1" 200 11029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.38.64.164 - - [23/Sep/2026:21:58:51 +0800] "GET /e%E5%AD%B8%E9%99%A2/%E6%95%99%E5%AD%B8%E8%B3%87%E6%BA%90-%E8%AA%9E%E6%96%87%E9%A0%98%E5%9F%9F_%E5%9C%8B%E8%AA%9E%E7%A7%91/ HTTP/1.1" 200 24129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.9.141.5 - - [23/Sep/2026:21:58:51 +0800] "GET /112/2019/08/20/1080826%E5%85%B1%E5%82%99%E7%A0%94%E7%BF%92/ HTTP/1.1" 200 16008 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 52.0.218.219 - - [23/Sep/2026:21:58:52 +0800] "GET /wp-content/uploads/sites/2975/2020/12/ HTTP/1.1" 200 1114 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:52 +0800] "GET /wp-content/uploads/sites/1444/2023/05/education-1024x681.jpg HTTP/1.1" 200 85131 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 66.249.79.172 - - [23/Sep/2026:21:58:52 +0800] "GET /6426/2011/10/02/title=%22%E6%95%99%E5%AD%B8%E8%88%87%E5%AE%A3%E5%B0%8E%E6%B4%BB%E5%8B%95%22 HTTP/1.1" 301 5916 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; GoogleOther)"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:52 +0800] "GET /wp-content/uploads/sites/1444/2022/04/S__140058629-768x511-1.jpg HTTP/1.1" 200 89470 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:52 +0800] "GET /activity/feed/ HTTP/1.1" 200 16446 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access message repeated 2 times: [2001:288:a201::67:81 - - [23/Sep/2026:21:58:52 +0800] "GET /activity/feed/ HTTP/1.1" 200 16446 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"]
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:52 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:52 +0800] "GET /activity/feed/ HTTP/1.1" 200 16446 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.140.23.128 - - [23/Sep/2026:21:58:48 +0800] "GET /2009/11/04/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E6%84%9B%E5%BF%83%E5%BF%97%E5%B7%A5/ HTTP/1.1" 20 [23/Sep/2026:21:58:55 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct  9 02:20:41 2blog apache-access 34.135.202.4 - - [23/Sep/2026:21:58:54 +0800] "GET /32745/2026/06/13/%E5%A9%B7%E5%A9%B7vs%E6%9D%8E%E5%AD%B8%E5%AE%B8/ HTTP/1.1" 200 90270 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 18.97.9.103 - - [23/Sep/2026:21:58:53 +0800] "GET /26150/category/c-11216/%E7%9B%B8%E9%97%9C%E6%B3%95%E8%A6%8F/c-74115/ HTTP/1.1" 200 22517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
Oct  9 02:20:41 2blog apache-access 34.76.216.34 - - [23/Sep/2026:21:58:56 +0800] "GET /newsletter/ HTTP/1.1" 200 13323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access ::1 - - [23/Sep/2026:21:58:56 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct  9 02:20:41 2blog apache-access Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:52 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.156.131.151 - - [23/Sep/2026:21:58:49 +0800] "GET /2018/03/22/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F90%E5%91%A8%E5%B9%B4%E6%A0%A1%E6%85%B6%E7%B4%80%E5%BF%B5/ HTTP/1.1" 200 19429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:53 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.53.151.194 - - [23/Sep/2026:21:58:48 +0800] "GET /2009/10/28/%E7%B6%B2%E8%B7%AF%E8%B3%87%E6%BA%90/ HTTP/1.1" 200 20566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:53 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 35.240.42.211 - - [23/Sep/2026:21:58:49 +0800] "GET /2009/10/24/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8Fgoogle%E5%9C%B0%E5%9C%96%E5%8F%8A%E5%AD%B8%E5%8D%80/ HTTP/1.1" 200 19902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:53 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.156.81.183 - - [23/Sep/2026:21:58:49 +0800] "GET /2012/10/10/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E6%A0%A1%E5%8F%B2-2/ HTTP/1.1" 200 22506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 35.205.179.10 - - [23/Sep/2026:21:58:49 +0800] "GET /2009/10/25/%E8%90%AC%E5%AF%8C%E6%A0%A1%E5%BE%BD/ HTTP/1.1" 200 19812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.38.171.159 - - [23/Sep/2026:21:58:49 +0800] "GET /2010/03/20/%E5%AE%A3%E5%B0%8E%E7%B6%B2%E7%AB%99/ HTTP/1.1" 200 20684 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:52 +0800] "GET /activity/feed/ HTTP/1.1" 200 16446 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 35.205.52.31 - - [23/Sep/2026:21:58:49 +0800] "GET /2020/10/09/%E5%AE%B6%E9%95%B7%E5%B0%88%E9%A0%81/ HTTP/1.1" 200 19448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 35.190.208.46 - - [23/Sep/2026:21:58:49 +0800] "GET /2009/10/25/%E5%8F%8B%E5%96%84%E6%A0%A1%E5%9C%92/ HTTP/1.1" 200 20381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.76.26.200 - - [23/Sep/2026:21:58:49 +0800] "GET /2012/10/10/%E5%AD%B8%E6%A0%A1%E7%89%B9%E8%89%B2-2/ HTTP/1.1" 200 21354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:53 +0800] "GET /wp-content/uploads/sites/1444/2020/09/001.png HTTP/1.1" 200 51707 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:53 +0800] "GET /wp-content/uploads/sites/1444/2021/04/%E4%B8%8B%E8%BC%89.jpg HTTP/1.1" 200 6291 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:53 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.34.144.108 - - [23/Sep/2026:21:58:49 +0800] "GET /2011/02/18/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E7%B8%BD%E5%8B%99%E8%99%95/ HTTP/1.1" 200 22536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 66.249.79.160 - - [23/Sep/2026:21:58:53 +0800] "GET /6426/2011/10/02/title=%22%E6%95%99%E5%AD%B8%E8%88%87%E5%AE%A3%E5%B0%8E%E6%B4%BB%E5%8B%95 HTTP/1.1" 404 33063 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; GoogleOther)"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:53 +0800] "GET /wp-content/uploads/sites/1444/2025/08/1755676697129.jpg HTTP/1.1" 200 32004 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:53 +0800] "GET /wp-content/uploads/sites/1444/2019/12/screen_768e55bf3d1accea_1568076162000.jpg HTTP/1.1" 200 180252 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 34.38.171.159 - - [23/Sep/2026:21:58:54 +0800] "GET /%E6%9B%B4%E5%A4%9A%E5%AE%A3%E5%B0%8E%E7%B6%B2%E7%AB%99/ HTTP/1.1" 200 24330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 35.205.179.10 - - [23/Sep/2026:21:58:54 +0800] "GET /%E5%AE%B6%E9%95%B7%E5%B0%88%E5%8D%80/ HTTP/1.1" 200 23943 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.53.151.194 - - [23/Sep/2026:21:58:54 +0800] "GET /e%E5%AD%B8%E9%99%A2/%E6%95%99%E5%AD%B8%E8%B3%87%E6%BA%90-%E8%AA%9E%E6%96%87%E9%A0%98%E5%9F%9F_%E8%8B%B1%E8%AA%9E%E7%A7%91/ HTTP/1.1" 200 24139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:54 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access message repeated 2 times: [2001:288:a201::67:81 - - [23/Sep/2026:21:58:54 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"]
Oct  9 02:20:41 2blog apache-access 34.14.72.93 - - [23/Sep/2026:21:58:51 +0800] "GET /2011/03/02/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E5%AD%B8%E6%A0%A1%E9%A1%98%E6%99%AF-2/ HTTP/1.1" 200 20217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.140.60.33 - - [23/Sep/2026:21:58:51 +0800] "GET /2011/02/18/%E6%9E%97%E5%96%84%E6%95%A6%E6%A0%A1%E9%95%B7%E7%B0%A1%E4%BB%8B/ HTTP/1.1" 200 22456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.78.255.226 - - [23/Sep/2026:21:58:51 +0800] "GET /2013/01/27/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E8%A1%8C%E4%BA%8B%E6%9B%86/ HTTP/1.1" 200 19506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:54 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2001:288:a201::67:81 - - [23/Sep/2026:21:58:54 +0800] "GET /activity/feed/ HTTP/1.1" 200 16109 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.78.10.199 - - [23/Sep/2026:21:58:51 +0800] "GET /2010/03/16/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E8%A1%8C%E6%94%BF%E5%B7%A5%E4%BD%9Csop-2/ HTTP/1.1" 200 20426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.62.72.244 - - [23/Sep/2026:21:58:51 +0800] "GET /2021/05/16/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E9%98%B2%E7%96%AB%E5%B0%88%E5%8D%80/ HTTP/1.1" 200 21368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 34.57.88.14 - - [23/Sep/2026:21:58:54 +0800] "GET /6504/category/%E6%AA%A2%E6%A0%B8%E9%81%B8%E5%96%AE/%E5%AD%B8%E6%A0%A1%E7%92%B0%E6%95%99%E7%B5%84%E7%B9%94/ HTTP/1.1" 200 15105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 140.111.67.10 - - [23/Sep/2026:21:58:54 +0800] "GET /" 301 273 "-" "-"
Oct  9 02:20:41 2blog apache-access 35.233.99.126 - - [23/Sep/2026:21:58:54 +0800] "GET /2015/12/22/%E8%90%AC%E5%AF%8C%E5%9C%8B%E5%B0%8F%E6%B3%95%E8%A6%8F%E5%B0%88%E5%8D%80/ HTTP/1.1" 200 25996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:54 +0800] "GET / HTTP/1.1" 200 25228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 2407:4b00:4c10:4b0:211e:9a7:817f:3108 - - [23/Sep/2026:21:58:54 +0800] "GET /wp-content/uploads/sites/1444/2023/12/DSC00300-1536x1024.jpg HTTP/1.1" 200 246254 "https://www.ytps.ilc.edu.tw/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1"
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:54 +0800] "GET /wp-content/cache/www.ssjh.ilc.edu.tw/wpfc-minified/7m4b5ed4/6xsa.css HTTP/1.1" 200 40884 "https://www.ssjh.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:55 +0800] "GET /wp-content/cache/www.ssjh.ilc.edu.tw/wpfc-minified/dsjd4rl6/6xsa.css HTTP/1.1" 200 1157 "https://www.ssjh.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:55 +0800] "GET /wp-content/cache/www.ssjh.ilc.edu.tw/wpfc-minified/d4b76a5b/6xsa.css HTTP/1.1" 200 55095 "https://www.ssjh.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  9 03:13:01 2blog CRON[844960]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:14:01 2blog CRON[844997]: (root) CMD (/sbin/checkvm.sh)
Oct  9 03:14:01 2blog CRON[844998]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct  9 03:14:01 2blog sendmail[845012]: 698JE1M9845012: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610081914.698JE1M9845012@2blog.ap2>, relay=root@localhost
Oct  9 03:14:01 2blog sm-mta[845013]: 698JE1Ei845013: from=<root@2blog.ap2>, size=460, class=0, nrcpts=2, msgid=<202610081914.698JE1M9845012@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:14:01 2blog sendmail[845012]: 698JE1M9845012: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JE1Ei845013 Message accepted for delivery)
Oct  9 03:14:01 2blog sendmail[845040]: 698JE16b845040: from=root, size=494, class=0, nrcpts=1, msgid=<202610081914.698JE16b845040@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct  9 03:14:01 2blog sm-mta[845041]: 698JE1ZU845041: from=<root@2blog.ap2>, size=732, class=0, nrcpts=1, msgid=<202610081914.698JE16b845040@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct  9 03:14:01 2blog sendmail[845040]: 698JE16b845040: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (698JE1ZU845041 Message accepted for delivery)
Oct  9 03:14:02 2blog sm-mta[845042]: 698JE1ZU845041: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30931, dsn=2.0.0, stat=Sent
Oct  9 03:14:02 2blog sm-mta[845015]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct  9 03:14:03 2blog sm-mta[845015]: 698JE1Ei845013: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c05:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct  9 03:14:04 2blog sm-mta[845015]: 698JE1Ei845013: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150460, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c05:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct  9 03:14:04 2blog sm-mta[845015]: 698JE1Ei845013: 698JE4Ei845015: DSN: Service unavailable
Oct  9 03:14:04 2blog sm-mta[845015]: 698JE4Ei845015: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:55 +0800] "GET /wp-content/uploads/sites/1405/elementor/css/post-742.css HTTP/1.1" 200 6070 "https://www.ssjh.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:55 +0800] "GET /wp-content/cache/www.ssjh.ilc.edu.tw/wpfc-minified/lpqbhi0y/6xs9.css HTTP/1.1" 200 34438 "https://www.ssjh.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct  9 02:20:41 2blog apache-access 122.100.115.150 - - [23/Sep/2026:21:58:55 +0800] "GET /wp-content/cache/www.ssjh.ilc.edu.tw/wpfc-minified/qwqp6mhh/6xs9.css HTTP/1.1" 200 54062 "https://www.ssjh.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct 10 21:59:01 2blog CRON[582599]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 22:00:01 2blog CRON[582637]: (root) CMD (/usr/local/bin/portal-log-push)
Oct 10 22:00:01 2blog CRON[582638]: (root) CMD (/sbin/check_load.sh)
Oct 10 22:00:01 2blog CRON[582639]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/libexec/sendmail/sendmail && /usr/share/sendmail/sendmail cron-msp)
Oct 10 22:00:01 2blog CRON[582640]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct 10 22:00:01 2blog CRON[582641]: (root) CMD (/sbin/checkvm.sh)
Oct 10 22:00:01 2blog CRON[582644]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 10 22:00:01 2blog sendmail[582699]: 69AE01Pm582699: from=root, size=317, class=0, nrcpts=1, msgid=<202610101400.69AE01Pm582699@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 10 22:00:01 2blog dbus-daemon[967]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.33418' (uid=0 pid=582741 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct 10 22:00:01 2blog systemd[1]: Starting Time & Date Service...