Oct 16 01:30:01 2blog sm-mta[3772704]: 69FHU1x13772704: from=<root@2blog.ap2>, size=559, class=0, nrcpts=1, msgid=<202610151730.69FHU1im3772661@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:30:01 2blog sm-mta[3772703]: 69FHU1pM3772703: from=<root@2blog.ap2>, size=659, class=0, nrcpts=1, msgid=<202610151730.69FHU1tf3772667@2blog.ap2>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:30:01 2blog sendmail[3772661]: 69FHU1im3772661: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHU1x13772704 Message accepted for delivery)
Oct 16 01:30:01 2blog sendmail[3772667]: 69FHU1tf3772667: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30417, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHU1pM3772703 Message accepted for delivery)
Oct 16 01:30:01 2blog sm-mta[3772715]: 69FHU1pM3772703: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30860, dsn=2.0.0, stat=Sent
Oct 16 01:30:01 2blog sendmail[3772713]: 69FHU1UJ3772713: from=root, size=494, class=0, nrcpts=1, msgid=<202610151730.69FHU1UJ3772713@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:30:01 2blog dbus-daemon[967]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct 16 01:30:01 2blog systemd[1]: Started Time & Date Service.
Oct 16 01:30:01 2blog sm-mta[3772718]: 69FHU11u3772718: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610151730.69FHU1UJ3772713@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:30:01 2blog sendmail[3772713]: 69FHU1UJ3772713: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHU11u3772718 Message accepted for delivery)
Oct 16 01:30:01 2blog sm-mta[3772757]: 69FHU11u3772718: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 16 01:30:02 2blog sendmail[3772796]: 69FHU2Rl3772796: from=root, size=431, class=0, nrcpts=1, msgid=<202610151730.69FHU2Rl3772796@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:30:02 2blog sm-mta[3772797]: 69FHU22P3772797: from=<root@2blog.ap2>, size=673, class=0, nrcpts=1, msgid=<202610151730.69FHU2Rl3772796@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:30:02 2blog sendmail[3772796]: 69FHU2Rl3772796: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30431, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHU22P3772797 Message accepted for delivery)
Oct 16 01:30:03 2blog sm-mta[3772798]: 69FHU22P3772797: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30874, dsn=2.0.0, stat=Sent
Oct 16 01:30:06 2blog crontab[3773520]: (root) LIST (root)
Oct 16 01:30:06 2blog crontab[3773553]: (root) LIST (root)
Oct 16 01:30:09 2blog sm-mta[3772714]: 69FHU1x13772704: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:08, xdelay=00:00:08, mailer=local, pri=30760, dsn=2.0.0, stat=Sent
Oct 16 01:30:10 2blog crontab[3774543]: (root) LIST (root)
Oct 16 01:30:10 2blog crontab[3774625]: (root) LIST (www-data)
Oct 16 01:30:22 2blog host-agent: Report sent successfully
Oct 16 01:30:31 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct 16 01:31:01 2blog CRON[3777328]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:32:01 2blog CRON[3777369]: (root) CMD (/sbin/checkvm.sh)
Oct 16 01:32:01 2blog CRON[3777368]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:32:01 2blog sendmail[3777406]: 69FHW1473777406: from=root, size=494, class=0, nrcpts=1, msgid=<202610151732.69FHW1473777406@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:32:01 2blog sm-mta[3777407]: 69FHW1bH3777407: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610151732.69FHW1473777406@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:32:01 2blog sendmail[3777406]: 69FHW1473777406: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHW1bH3777407 Message accepted for delivery)
Oct 16 01:32:01 2blog sm-mta[3777408]: 69FHW1bH3777407: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 16 01:33:01 2blog CRON[3777448]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:34:01 2blog CRON[3777483]: (root) CMD (/sbin/checkvm.sh)
Oct 16 01:34:01 2blog CRON[3777482]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:34:01 2blog sendmail[3777520]: 69FHY1ux3777520: from=root, size=494, class=0, nrcpts=1, msgid=<202610151734.69FHY1ux3777520@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:34:01 2blog sm-mta[3777521]: 69FHY1RI3777521: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610151734.69FHY1ux3777520@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:34:01 2blog sendmail[3777520]: 69FHY1ux3777520: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHY1RI3777521 Message accepted for delivery)
Oct 16 01:34:01 2blog sm-mta[3777522]: 69FHY1RI3777521: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 16 01:35:01 2blog CRON[3777546]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct 16 01:35:01 2blog CRON[3777547]: (root) CMD (/sbin/check_load.sh)
Oct 16 01:35:01 2blog CRON[3777548]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:35:01 2blog sendmail[3777579]: 69FHZ1Ai3777579: from=root, size=317, class=0, nrcpts=1, msgid=<202610151735.69FHZ1Ai3777579@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:35:01 2blog dbus-daemon[967]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.36824' (uid=0 pid=3777592 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct 16 01:35:01 2blog systemd[1]: Starting Time & Date Service...
Oct 16 01:35:01 2blog sm-mta[3777594]: 69FHZ13k3777594: from=<root@2blog.ap2>, size=559, class=0, nrcpts=1, msgid=<202610151735.69FHZ1Ai3777579@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:35:01 2blog sendmail[3777579]: 69FHZ1Ai3777579: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHZ13k3777594 Message accepted for delivery)
Oct 16 01:35:01 2blog dbus-daemon[967]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct 16 01:35:01 2blog systemd[1]: Started Time & Date Service.
Oct 16 01:35:01 2blog sm-mta[3777595]: 69FHZ13k3777594: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30760, dsn=2.0.0, stat=Sent
Oct 16 01:35:06 2blog crontab[3778390]: (root) LIST (root)
Oct 16 01:35:06 2blog crontab[3778423]: (root) LIST (root)
Oct 16 01:35:10 2blog crontab[3779412]: (root) LIST (root)
Oct 16 01:35:10 2blog crontab[3779494]: (root) LIST (www-data)
Oct 16 01:35:22 2blog host-agent: Report sent successfully
Oct 16 01:35:31 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct 16 01:36:01 2blog CRON[3782204]: (root) CMD (/sbin/checkvm.sh)
Oct 16 01:36:01 2blog CRON[3782203]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:36:02 2blog sendmail[3782241]: 69FHa2iU3782241: from=root, size=494, class=0, nrcpts=1, msgid=<202610151736.69FHa2iU3782241@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:36:02 2blog sm-mta[3782242]: 69FHa2eU3782242: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610151736.69FHa2iU3782241@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:36:02 2blog sendmail[3782241]: 69FHa2iU3782241: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHa2eU3782242 Message accepted for delivery)
Oct 16 01:36:02 2blog sm-mta[3782243]: 69FHa2eU3782242: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 16 01:37:01 2blog CRON[3782279]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:38:01 2blog CRON[3782304]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:38:01 2blog CRON[3782305]: (root) CMD (/sbin/checkvm.sh)
Oct 16 01:38:01 2blog sendmail[3782342]: 69FHc1Ij3782342: from=root, size=494, class=0, nrcpts=1, msgid=<202610151738.69FHc1Ij3782342@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:38:01 2blog sm-mta[3782343]: 69FHc18p3782343: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610151738.69FHc1Ij3782342@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 16 01:38:01 2blog sendmail[3782342]: 69FHc1Ij3782342: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69FHc18p3782343 Message accepted for delivery)
Oct 16 01:38:01 2blog sm-mta[3782344]: 69FHc18p3782343: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
=736, class=0, nrcpts=1, msgid=<202610132236.69DMa2Hg3840309@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:36:02 2blog sendmail[3840309]: 69DMa2Hg3840309: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMa2253840310 Message accepted for delivery)
Oct 14 06:36:02 2blog sm-mta[3840311]: 69DMa2253840310: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 14 06:36:04 2blog sm-mta[3840284]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct 14 06:36:04 2blog sm-mta[3840284]: 69DMa2Sq3840282: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c10:0:0:0:1b], dsn=5.1.1, stat=User unknown
Oct 14 06:36:05 2blog sm-mta[3840284]: 69DMa2Sq3840282: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c10:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct 14 06:36:05 2blog sm-mta[3840284]: 69DMa2Sq3840282: 69DMa5Sq3840284: DSN: Service unavailable
Oct 14 06:36:05 2blog sm-mta[3840284]: 69DMa5Sq3840284: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct 14 06:37:01 2blog CRON[3840342]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:38:01 2blog CRON[3840369]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:38:01 2blog CRON[3840370]: (root) CMD (/sbin/checkvm.sh)
Oct 14 06:38:01 2blog sendmail[3840384]: 69DMc1ZE3840384: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610132238.69DMc1ZE3840384@2blog.ap2>, relay=root@localhost
Oct 14 06:38:01 2blog sm-mta[3840385]: 69DMc1lG3840385: from=<root@2blog.ap2>, size=463, class=0, nrcpts=2, msgid=<202610132238.69DMc1ZE3840384@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:38:01 2blog sendmail[3840384]: 69DMc1ZE3840384: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMc1lG3840385 Message accepted for delivery)
Oct 14 06:38:01 2blog sendmail[3840413]: 69DMc1N73840413: from=root, size=494, class=0, nrcpts=1, msgid=<202610132238.69DMc1N73840413@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:38:01 2blog sm-mta[3840414]: 69DMc1rX3840414: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610132238.69DMc1N73840413@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:38:01 2blog sendmail[3840413]: 69DMc1N73840413: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMc1rX3840414 Message accepted for delivery)
Oct 14 06:38:01 2blog sm-mta[3840415]: 69DMc1rX3840414: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 14 06:38:02 2blog sm-mta[3840387]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct 14 06:38:02 2blog sm-mta[3840387]: 69DMc1lG3840385: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c11:0:0:0:1b], dsn=5.1.1, stat=User unknown
Oct 14 06:38:03 2blog sm-mta[3840387]: 69DMc1lG3840385: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c11:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct 14 06:38:03 2blog sm-mta[3840387]: 69DMc1lG3840385: 69DMc3lG3840387: DSN: Service unavailable
Oct 14 06:38:03 2blog sm-mta[3840387]: 69DMc3lG3840387: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct 14 06:39:00 2blog systemd[1]: Starting Clean php session files...
Oct 14 06:39:00 2blog systemd[1]: phpsessionclean.service: Deactivated successfully.
Oct 14 06:39:00 2blog systemd[1]: Finished Clean php session files.
Oct 14 06:39:01 2blog CRON[3840554]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:39:01 2blog CRON[3840555]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Oct 14 06:40:01 2blog CRON[3840611]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct 14 06:40:01 2blog CRON[3840612]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:40:01 2blog CRON[3840613]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/libexec/sendmail/sendmail && /usr/share/sendmail/sendmail cron-msp)
Oct 14 06:40:01 2blog CRON[3840614]: (root) CMD (/sbin/check_load.sh)
Oct 14 06:40:01 2blog CRON[3840627]: (root) CMD (/sbin/checkvm.sh)
Oct 14 06:40:01 2blog sendmail[3840669]: 69DMe1De3840669: from=root, size=317, class=0, nrcpts=1, msgid=<202610132240.69DMe1De3840669@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:40:01 2blog dbus-daemon[965]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.64960' (uid=0 pid=3840692 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct 14 06:40:01 2blog systemd[1]: Starting Time & Date Service...
Oct 14 06:40:01 2blog sm-mta[3840693]: 69DMe1853840693: from=<root@2blog.ap2>, size=559, class=0, nrcpts=1, msgid=<202610132240.69DMe1De3840669@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:40:01 2blog sendmail[3840669]: 69DMe1De3840669: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMe1853840693 Message accepted for delivery)
Oct 14 06:40:01 2blog sendmail[3840689]: 69DMe1I23840689: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610132240.69DMe1I23840689@2blog.ap2>, relay=root@localhost
Oct 14 06:40:01 2blog sm-mta[3840695]: 69DMe1853840693: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30760, dsn=2.0.0, stat=Sent
Oct 14 06:40:01 2blog dbus-daemon[965]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct 14 06:40:01 2blog systemd[1]: Started Time & Date Service.
Oct 14 06:40:01 2blog sm-mta[3840697]: 69DMe1oY3840697: from=<root@2blog.ap2>, size=463, class=0, nrcpts=2, msgid=<202610132240.69DMe1I23840689@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:40:01 2blog sendmail[3840689]: 69DMe1I23840689: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMe1oY3840697 Message accepted for delivery)
Oct 14 06:40:01 2blog sendmail[3840761]: 69DMe1af3840761: from=root, size=494, class=0, nrcpts=1, msgid=<202610132240.69DMe1af3840761@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:40:01 2blog sm-mta[3840762]: 69DMe1mE3840762: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610132240.69DMe1af3840761@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:40:01 2blog sendmail[3840761]: 69DMe1af3840761: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMe1mE3840762 Message accepted for delivery)
Oct 14 06:40:01 2blog sm-mta[3840780]: 69DMe1mE3840762: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 14 06:40:02 2blog sm-mta[3840710]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct 14 06:40:03 2blog sm-mta[3840710]: 69DMe1oY3840697: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c11:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct 14 06:40:04 2blog sm-mta[3840710]: 69DMe1oY3840697: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c11:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct 14 06:40:04 2blog sm-mta[3840710]: 69DMe1oY3840697: 69DMe4oY3840710: DSN: Service unavailable
Oct 14 06:40:04 2blog sm-mta[3840710]: 69DMe4oY3840710: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct 14 06:40:07 2blog crontab[3841439]: (root) LIST (root)
Oct 14 06:40:07 2blog crontab[3841472]: (root) LIST (root)
Oct 14 06:40:10 2blog crontab[3842387]: (root) LIST (root)
Oct 14 06:40:11 2blog crontab[3842469]: (root) LIST (www-data)
Oct 14 06:40:24 2blog host-agent: Report sent successfully
Oct 14 06:40:31 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct 14 06:41:01 2blog CRON[3845216]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:42:01 2blog CRON[3845259]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:42:01 2blog CRON[3845260]: (root) CMD (/sbin/checkvm.sh)
Oct 14 06:42:01 2blog sendmail[3845274]: 69DMg1qd3845274: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610132242.69DMg1qd3845274@2blog.ap2>, relay=root@localhost
Oct 14 06:42:01 2blog sm-mta[3845275]: 69DMg14r3845275: from=<root@2blog.ap2>, size=463, class=0, nrcpts=2, msgid=<202610132242.69DMg1qd3845274@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:42:01 2blog sendmail[3845274]: 69DMg1qd3845274: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMg14r3845275 Message accepted for delivery)
Oct 14 06:42:01 2blog sendmail[3845302]: 69DMg1b23845302: from=root, size=494, class=0, nrcpts=1, msgid=<202610132242.69DMg1b23845302@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:42:01 2blog sm-mta[3845303]: 69DMg1783845303: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610132242.69DMg1b23845302@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:42:01 2blog sendmail[3845302]: 69DMg1b23845302: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMg1783845303 Message accepted for delivery)
Oct 14 06:42:01 2blog sm-mta[3845304]: 69DMg1783845303: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 14 06:42:03 2blog sm-mta[3845277]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct 14 06:42:04 2blog sm-mta[3845277]: 69DMg14r3845275: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c06:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct 14 06:42:04 2blog sm-mta[3845277]: 69DMg14r3845275: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c06:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct 14 06:42:04 2blog sm-mta[3845277]: 69DMg14r3845275: 69DMg44r3845277: DSN: Service unavailable
Oct 14 06:42:04 2blog sm-mta[3845277]: 69DMg44r3845277: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct 14 06:43:01 2blog CRON[3845330]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:44:01 2blog CRON[3845364]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:44:01 2blog CRON[3845363]: (root) CMD (/sbin/checkvm.sh)
Oct 14 06:44:02 2blog sendmail[3845378]: 69DMi2G43845378: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610132244.69DMi2G43845378@2blog.ap2>, relay=root@localhost
Oct 14 06:44:02 2blog sm-mta[3845380]: 69DMi2wO3845380: from=<root@2blog.ap2>, size=463, class=0, nrcpts=2, msgid=<202610132244.69DMi2G43845378@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:44:02 2blog sendmail[3845378]: 69DMi2G43845378: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMi2wO3845380 Message accepted for delivery)
Oct 14 06:44:02 2blog sendmail[3845407]: 69DMi2vj3845407: from=root, size=494, class=0, nrcpts=1, msgid=<202610132244.69DMi2vj3845407@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:44:02 2blog sm-mta[3845408]: 69DMi2q13845408: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610132244.69DMi2vj3845407@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:44:02 2blog sendmail[3845407]: 69DMi2vj3845407: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMi2q13845408 Message accepted for delivery)
Oct 14 06:44:02 2blog sm-mta[3845409]: 69DMi2q13845408: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 14 06:44:05 2blog sm-mta[3845382]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct 14 06:44:05 2blog sm-mta[3845382]: 69DMi2wO3845380: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c03:0:0:0:1a], dsn=5.1.1, stat=User unknown
Oct 14 06:44:06 2blog sm-mta[3845382]: 69DMi2wO3845380: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:04, xdelay=00:00:04, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c03:0:0:0:1a], dsn=5.0.0, stat=Service unavailable
Oct 14 06:44:06 2blog sm-mta[3845382]: 69DMi2wO3845380: 69DMi6wO3845382: DSN: Service unavailable
Oct 14 06:44:06 2blog sm-mta[3845382]: 69DMi6wO3845382: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct 14 06:45:01 2blog CRON[3845453]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:45:01 2blog CRON[3845454]: (root) CMD (/sbin/check_load.sh)
Oct 14 06:45:01 2blog CRON[3845455]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct 14 06:45:02 2blog sendmail[3845486]: 69DMj2Vr3845486: from=root, size=317, class=0, nrcpts=1, msgid=<202610132245.69DMj2Vr3845486@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:45:02 2blog dbus-daemon[965]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.64962' (uid=0 pid=3845500 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct 14 06:45:03 2blog systemd[1]: Starting Time & Date Service...
Oct 14 06:45:03 2blog sm-mta[3845502]: 69DMj2A83845502: from=<root@2blog.ap2>, size=559, class=0, nrcpts=1, msgid=<202610132245.69DMj2Vr3845486@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:45:03 2blog sendmail[3845486]: 69DMj2Vr3845486: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30317, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMj2A83845502 Message accepted for delivery)
Oct 14 06:45:03 2blog sm-mta[3845503]: 69DMj2A83845502: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:01, xdelay=00:00:00, mailer=local, pri=30760, dsn=2.0.0, stat=Sent
Oct 14 06:45:03 2blog dbus-daemon[965]: [system] Successfully activated service 'org.freedesktop.timedate1'
Oct 14 06:45:03 2blog systemd[1]: Started Time & Date Service.
Oct 14 06:45:08 2blog crontab[3846212]: (root) LIST (root)
Oct 14 06:45:09 2blog crontab[3846245]: (root) LIST (root)
Oct 14 06:45:12 2blog crontab[3847159]: (root) LIST (root)
Oct 14 06:45:12 2blog crontab[3847241]: (root) LIST (www-data)
Oct 14 06:45:24 2blog host-agent: Report sent successfully
Oct 14 06:45:33 2blog systemd[1]: systemd-timedated.service: Deactivated successfully.
Oct 14 06:46:01 2blog CRON[3849991]: (root) CMD (/sbin/checkvm.sh)
Oct 14 06:46:01 2blog CRON[3849990]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:46:02 2blog sendmail[3850005]: 69DMk1ow3850005: from=root@2blog.ap2, size=259, class=0, nrcpts=2, msgid=<202610132246.69DMk1ow3850005@2blog.ap2>, relay=root@localhost
Oct 14 06:46:02 2blog sm-mta[3850006]: 69DMk2Lc3850006: from=<root@2blog.ap2>, size=463, class=0, nrcpts=2, msgid=<202610132246.69DMk1ow3850005@2blog.ap2>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:46:02 2blog sendmail[3850005]: 69DMk1ow3850005: to=<pake@steps.com.tw>,<kasen@steps.com.tw>, ctladdr=root@2blog.ap2 (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=60259, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMk2Lc3850006 Message accepted for delivery)
Oct 14 06:46:02 2blog sendmail[3850034]: 69DMk2Wq3850034: from=root, size=494, class=0, nrcpts=1, msgid=<202610132246.69DMk2Wq3850034@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 14 06:46:02 2blog sm-mta[3850035]: 69DMk2bP3850035: from=<root@2blog.ap2>, size=736, class=0, nrcpts=1, msgid=<202610132246.69DMk2Wq3850034@2blog.ap2>, bodytype=7BIT, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
Oct 14 06:46:02 2blog sendmail[3850034]: 69DMk2Wq3850034: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30494, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (69DMk2bP3850035 Message accepted for delivery)
Oct 14 06:46:02 2blog sm-mta[3850036]: 69DMk2bP3850035: to=<root@2blog.ap2>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30937, dsn=2.0.0, stat=Sent
Oct 14 06:46:04 2blog sm-mta[3850008]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
Oct 14 06:46:04 2blog sm-mta[3850008]: 69DMk2Lc3850006: to=<kasen@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c10:0:0:0:1b], dsn=5.1.1, stat=User unknown
Oct 14 06:46:05 2blog sm-mta[3850008]: 69DMk2Lc3850006: to=<pake@steps.com.tw>, ctladdr=<root@2blog.ap2> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=150463, relay=aspmx.l.google.com. [IPv6:2607:f8b0:4002:c10:0:0:0:1b], dsn=5.0.0, stat=Service unavailable
Oct 14 06:46:05 2blog sm-mta[3850008]: 69DMk2Lc3850006: 69DMk5Lc3850008: DSN: Service unavailable
Oct 14 06:46:05 2blog sm-mta[3850008]: 69DMk5Lc3850008: to=<root@2blog.ap2>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Oct 14 06:34:24 2blog apache-access 140.111.67.10 - - [24/Sep/2026:07:48:04 +0800] "GET /" 301 273 "-" "-"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:04 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 1491 "-" "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:04 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 34.203.111.15 - - [24/Sep/2026:07:48:04 +0800] "GET /wp-content/uploads/sites/2586/2024/12/ HTTP/1.1" 200 1113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2409:8c54:6010:100:7887:56ff:fe61:c732 - - [24/Sep/2026:07:48:04 +0800] "GET /wp-content/cache/www.najh.ilc.edu.tw/wpfc-minified/1f13uvw/6wh9.css HTTP/1.1" 200 40884 "https://www.najh.ilc.edu.tw/2023/03/16/%E8%BD%89%E7%9F%A5%E8%B2%A1%E5%9C%98%E6%B3%95%E4%BA%BA%E4%B9%9D%E4%B9%9D%E6%96%87%E6%95%99%E5%9F%BA%E9%87%91%E6%9C%83%E7%AC%AC%E4%B8%83%E5%B1%86%E8%87%BA%E7%81%A3%E4%B8%AD%E5%B0%8F%E5%AD%B8%E6%95%B8/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2409:8c54:6010:100:7887:56ff:fe61:c732 - - [24/Sep/2026:07:48:05 +0800] "GET /wp-content/cache/www.najh.ilc.edu.tw/wpfc-minified/87xhsi2d/6wh9.css HTTP/1.1" 200 4322 "https://www.najh.ilc.edu.tw/2023/03/16/%E8%BD%89%E7%9F%A5%E8%B2%A1%E5%9C%98%E6%B3%95%E4%BA%BA%E4%B9%9D%E4%B9%9D%E6%96%87%E6%95%99%E5%9F%BA%E9%87%91%E6%9C%83%E7%AC%AC%E4%B8%83%E5%B1%86%E8%87%BA%E7%81%A3%E4%B8%AD%E5%B0%8F%E5%AD%B8%E6%95%B8/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:4860:7:b10::f6 - - [24/Sep/2026:07:48:05 +0800] "GET / HTTP/1.1" 200 29412 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:05 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:05 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct 14 06:34:24 2blog apache-access 85.254.130.230 - - [24/Sep/2026:07:48:05 +0800] "GET /wp-content/uploads/sites/1592/6489/previews/6489-570970.jpg HTTP/1.1" 200 8544 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 34.30.218.145 - - [24/Sep/2026:07:48:05 +0800] "GET /2014/08/28/%E6%86%B2%E6%98%8E%E6%A0%A1%E5%BE%BDlogo/ HTTP/1.1" 200 22224 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2409:8c54:6010:100:7887:56ff:fe61:c732 - - [24/Sep/2026:07:48:06 +0800] "GET /wp-includes/js/imagesloaded.min.js HTTP/1.1" 200 2683 "https://www.najh.ilc.edu.tw/2023/03/16/%E8%BD%89%E7%9F%A5%E8%B2%A1%E5%9C%98%E6%B3%95%E4%BA%BA%E4%B9%9D%E4%B9%9D%E6%96%87%E6%95%99%E5%9F%BA%E9%87%91%E6%9C%83%E7%AC%AC%E4%B8%83%E5%B1%86%E8%87%BA%E7%81%A3%E4%B8%AD%E5%B0%8F%E5%AD%B8%E6%95%B8/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2409:8c54:6010:100:7887:56ff:fe61:c732 - - [24/Sep/2026:07:48:06 +0800] "GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js HTTP/1.1" 200 15048 "https://www.najh.ilc.edu.tw/2023/03/16/%E8%BD%89%E7%9F%A5%E8%B2%A1%E5%9C%98%E6%B3%95%E4%BA%BA%E4%B9%9D%E4%B9%9D%E6%96%87%E6%95%99%E5%9F%BA%E9%87%91%E6%9C%83%E7%AC%AC%E4%B8%83%E5%B1%86%E8%87%BA%E7%81%A3%E4%B8%AD%E5%B0%8F%E5%AD%B8%E6%95%B8/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:06 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 2409:8c54:6010:100:7887:56ff:fe61:c732 - - [24/Sep/2026:07:48:06 +0800] "GET /wp-content/themes/oceanwp/assets/js/select.min.js HTTP/1.1" 200 2408 "https://www.najh.ilc.edu.tw/2023/03/16/%E8%BD%89%E7%9F%A5%E8%B2%A1%E5%9C%98%E6%B3%95%E4%BA%BA%E4%B9%9D%E4%B9%9D%E6%96%87%E6%95%99%E5%9F%BA%E9%87%91%E6%9C%83%E7%AC%AC%E4%B8%83%E5%B1%86%E8%87%BA%E7%81%A3%E4%B8%AD%E5%B0%8F%E5%AD%B8%E6%95%B8/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 34.205.163.103 - - [24/Sep/2026:07:48:06 +0800] "GET /englishvillage/wp-content/uploads/sites/3106/2025/11/IMG_6751-1024x768.jpeg HTTP/1.1" 200 115140 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2409:8c54:6010:100:7887:56ff:fe61:c732 - - [24/Sep/2026:07:48:07 +0800] "GET /wp-includes/js/mediaelement/renderers/vimeo.min.js HTTP/1.1" 200 3164 "https://www.najh.ilc.edu.tw/2023/03/16/%E8%BD%89%E7%9F%A5%E8%B2%A1%E5%9C%98%E6%B3%95%E4%BA%BA%E4%B9%9D%E4%B9%9D%E6%96%87%E6%95%99%E5%9F%BA%E9%87%91%E6%9C%83%E7%AC%AC%E4%B8%83%E5%B1%86%E8%87%BA%E7%81%A3%E4%B8%AD%E5%B0%8F%E5%AD%B8%E6%95%B8/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:07 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 1491 "-" "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:07 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 142.147.196.36 - - [24/Sep/2026:07:48:08 +0800] "GET /wp-content/uploads/sites/2979/6552/6552-4131059.jpg HTTP/1.1" 200 20345 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 240e:967:e200:a00:0:1:0:14 - - [24/Sep/2026:07:48:08 +0800] "GET /699/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2F2blog.ilc.edu.tw%2F699%2F2013%2F12%2F16%2F%25e7%25ac%25ac16%25e9%2580%25b1%25e5%2584%25aa%25e7%25a7%2580%25e6%25a8%25a1%25e7%25af%2584%25e7%2594%259f%25e5%2590%258d%25e5%2596%25ae12%25e6%259c%25889%25e6%2597%25a512%25e6%259c%258813%25e6%2597%25a5%25ef%25bc%2581%2F HTTP/1.1" 200 7258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 240e:967:e200:a00:0:1:0:14 - - [24/Sep/2026:07:48:08 +0800] "GET /favicon.ico HTTP/1.1" 302 901 "https://2blog.ilc.edu.tw/699/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2F2blog.ilc.edu.tw%2F699%2F2013%2F12%2F16%2F%25e7%25ac%25ac16%25e9%2580%25b1%25e5%2584%25aa%25e7%25a7%2580%25e6%25a8%25a1%25e7%25af%2584%25e7%2594%259f%25e5%2590%258d%25e5%2596%25ae12%25e6%259c%25889%25e6%2597%25a512%25e6%259c%258813%25e6%2597%25a5%25ef%25bc%2581%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:08 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 3.232.39.98 - - [24/Sep/2026:07:48:09 +0800] "GET /wp-content/uploads/sites/292/135/previews-med/135-2949804.gif HTTP/1.1" 200 8161 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a218:1:9612:f949:770:94bc - - [24/Sep/2026:07:48:09 +0800] "GET /wp-content/uploads/sites/1155/2020/04/cropped-%E5%AE%9C%E8%98%AD%E7%B8%A3%E9%BB%8E%E6%98%8E%E5%9C%8B%E6%B0%91%E5%B0%8F%E5%AD%B8_%E6%A0%A1%E5%BE%BD-32x32.jpg HTTP/1.1" 200 2438 "https://www.lmes.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 240e:967:e200:a00:0:1:0:14 - - [24/Sep/2026:07:48:09 +0800] "GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1" 200 4946 "https://2blog.ilc.edu.tw/699/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2F2blog.ilc.edu.tw%2F699%2F2013%2F12%2F16%2F%25e7%25ac%25ac16%25e9%2580%25b1%25e5%2584%25aa%25e7%25a7%2580%25e6%25a8%25a1%25e7%25af%2584%25e7%2594%259f%25e5%2590%258d%25e5%2596%25ae12%25e6%259c%25889%25e6%2597%25a512%25e6%259c%258813%25e6%2597%25a5%25ef%25bc%2581%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 140.111.67.10 - - [24/Sep/2026:07:48:09 +0800] "GET /" 301 273 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a27b:1:6849:a91a:f642:afc - - [24/Sep/2026:07:48:09 +0800] "-" 408 4791 "-" "-"
Oct 14 06:34:24 2blog apache-access message repeated 2 times: [2001:288:a27b:1:6849:a91a:f642:afc - - [24/Sep/2026:07:48:09 +0800] "-" 408 4791 "-" "-"]
Oct 14 06:34:24 2blog apache-access 35.190.204.246 - - [24/Sep/2026:07:48:09 +0800] "GET / HTTP/1.1" 301 881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 216.73.216.55 - - [24/Sep/2026:07:48:10 +0800] "GET /32745/author/cwj15/page/665/ HTTP/1.1" 200 91119 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
Oct 14 06:34:24 2blog apache-access 35.190.204.246 - - [24/Sep/2026:07:48:10 +0800] "GET / HTTP/1.1" 200 29341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:10 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:10 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct 14 06:34:24 2blog apache-access 54.152.163.42 - - [24/Sep/2026:07:48:10 +0800] "GET /englishvillage/wp-content/uploads/sites/3106/2025/11/IMG_6787-1024x768.jpeg HTTP/1.1" 200 92385 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:11 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 2001:b011:e003:cdac:d0d:bf3e:6ce3:96e8 - - [24/Sep/2026:07:48:12 +0800] "GET /dashen/%E7%96%AB%E6%83%85%E5%BE%8C%E7%9A%84%E5%B9%BC%E5%B0%8F%E9%8A%9C%E6%8E%A5%E2%94%80%E8%BF%8E%E6%8E%A5%E5%BE%8C%E7%96%AB%E6%83%85%E6%99%82%E4%BB%A3%E5%B0%8F%E4%B8%80%E6%96%B0%E7%94%9F%E5%A4%A7%E6%8C%91/ HTTP/1.1" 200 55920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 23.239.177.176 - - [24/Sep/2026:07:48:12 +0800] "GET /wp-content/uploads/sites/233/1003/1003-1925332.jpg HTTP/1.1" 200 71351 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 34.134.185.175 - - [24/Sep/2026:07:48:12 +0800] "GET /9536/2012/01/16/%E7%A4%BE%E5%8D%80%E6%97%A5%E6%9B%86-%E8%A1%8C%E5%81%A5%E7%A4%BE%E5%8D%80-%E9%9B%A3%E5%BE%97%E4%B8%80%E8%A6%8B%E7%9A%84%E6%B0%B4%E5%88%A9%E5%B7%A5%E7%A8%8B-%E5%80%92%E8%99%B9%E5%90%B8%E5%B7%A5/ HTTP/1.1" 200 14833 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 35.225.62.159 - - [24/Sep/2026:07:48:12 +0800] "GET /6/2022/12/09/ HTTP/1.1" 200 16630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 18.210.58.238 - - [24/Sep/2026:07:48:13 +0800] "GET /wp-content/uploads/sites/3889/2023/08/?C=S;O%3DA HTTP/1.1" 200 1552 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 84.37.245.192 - - [24/Sep/2026:07:48:12 +0800] "GET /17160/wp-content/uploads/sites/1249/2021/03/S__90996744-1024x1024.jpg HTTP/1.1" 200 158682 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 84.37.234.95 - - [24/Sep/2026:07:48:13 +0800] "GET /sunsun/wp-content/uploads/sites/2607/2021/03/IMG_1735-300x225.jpg HTTP/1.1" 200 21138 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 66.249.71.40 - - [24/Sep/2026:07:48:14 +0800] "GET /shjes111/wp-content/uploads/sites/3727/2025/01/1140102%E5%85%AC%E9%96%8B%E8%AA%B2%E6%95%99%E6%A1%88%E5%BC%B5%E6%85%A7%E5%A7%AC.doc HTTP/1.1" 200 98482 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET / HTTP/1.1" 200 32004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 140.111.67.10 - - [24/Sep/2026:07:48:14 +0800] "GET /" 301 273 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-content/cache/www.ilc.edu.tw/wpfc-minified/sz1rpuo/8141l.css HTTP/1.1" 304 790 "https://www.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-content/cache/www.ilc.edu.tw/wpfc-minified/7ihu9bns/8141l.css HTTP/1.1" 304 790 "https://www.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-content/cache/www.ilc.edu.tw/wpfc-minified/fdlul8k0/8141l.css HTTP/1.1" 304 790 "https://www.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-content/cache/www.ilc.edu.tw/wpfc-minified/2encr51g/8141l.css HTTP/1.1" 304 790 "https://www.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-content/cache/www.ilc.edu.tw/wpfc-minified/difb1vbs/8141l.js HTTP/1.1" 304 790 "https://www.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a22d:1:b403:7a3c:e18:31e0 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-content/cache/www.ilc.edu.tw/wpfc-minified/21kp93v9/8141l.css HTTP/1.1" 304 790 "https://www.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 44.215.61.66 - - [24/Sep/2026:07:48:14 +0800] "GET /32745/wp-json/wp/v2/comments?post=77810 HTTP/1.1" 200 6011 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 66.249.79.172 - - [24/Sep/2026:07:48:15 +0800] "GET /9661/category/c-33507/ HTTP/1.1" 200 43064 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:15 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:15 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:15 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 6282 "-" "node"
Oct 14 06:34:24 2blog apache-access 66.249.79.136 - - [24/Sep/2026:07:48:14 +0800] "GET /wp-login.php?action=ilc_logout&_wpnonce=43754d0aad&redirect_to=//elengallery.ru/gallery/48783/ HTTP/1.1" 302 8245 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct 14 06:34:24 2blog apache-access 140.111.120.28 - - [24/Sep/2026:07:48:16 +0800] "GET /wp-content/uploads/sites/3846/2026/02/%E9%81%BF%E5%85%8D%E8%AA%A4%E5%85%A5%E8%A9%90%E9%A8%99%E7%B6%B2%E7%AB%99APP%E5%B0%8F%E5%B8%B8%E8%AD%98.jpg HTTP/1.1" 304 5581 "https://itajj.ilc.edu.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 34.9.141.5 - - [24/Sep/2026:07:48:16 +0800] "GET /26362/2015/02/25/%E6%B4%BB%E5%8B%95%E5%90%8D%E7%A8%B1%EF%BC%9A104%E5%AD%B8%E5%B9%B4%E5%BA%A6%E5%89%B5%E6%84%8F%E8%87%BA%E7%81%A3%E6%AF%8D%E8%AA%9E%E6%97%A5%E6%B4%BB%E5%8B%95/ HTTP/1.1" 200 22993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 35.194.61.54 - - [24/Sep/2026:07:48:16 +0800] "GET /32745/category/%E8%8E%8E%E8%8E%89vs%E6%96%B0%E5%B3%B0/ HTTP/1.1" 200 90302 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:47:01 2blog CRON[3850066]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 14 06:34:24 2blog apache-access 3.209.174.110 - - [24/Sep/2026:07:48:17 +0800] "GET /wp-content/uploads/sites/1233/2019/10/?C=S;O%3DD HTTP/1.1" 200 1113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 52.167.144.138 - - [24/Sep/2026:07:48:16 +0800] "GET /868/44488/ HTTP/1.1" 200 23245 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:17 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 6267 "-" "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)"
Oct 14 06:34:24 2blog apache-access 2804:6f60:c0e3:4d00:29ad:5a0f:776b:101 - - [24/Sep/2026:07:48:17 +0800] "GET /2012/09/02/%e8%90%ac%e5%af%8c%e5%9c%8b%e5%b0%8f%e7%9a%84%e5%b8%ab%e9%95%b7-2/ HTTP/1.1" 200 27169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.126 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 66.249.79.136 - - [24/Sep/2026:07:48:15 +0800] "GET /wp-login.php?key=4o5xp387&_wpnonce=&action=ilc_logout&redirect_to=https%3A%2F%2Fchromewebstore.google.com%2Fdetail%2Faayyy-codes-%E2%80%93-auto-reveal%2Fejfmofafomekjlndnmglikppmhdhkfie HTTP/1.1" 302 8321 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:17 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 1491 "-" "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)"
Oct 14 06:34:24 2blog apache-access 84.32.65.39 - - [24/Sep/2026:07:48:18 +0800] "GET /wp-content/uploads/sites/3200/43641/43641-4233323.jpg HTTP/1.1" 200 20935 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 66.249.79.136 - - [24/Sep/2026:07:48:16 +0800] "GET /wp-login.php?key=3a84x427&_wpnonce=&action=ilc_logout&redirect_to=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.us.dyjycbt.google HTTP/1.1" 302 3496 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8010.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Oct 14 06:34:24 2blog apache-access 170.23.6.126 - - [24/Sep/2026:07:48:19 +0800] "GET /wp-content/uploads/sites/2800/6436/previews/6436-3674112.jpg HTTP/1.1" 200 16380 "https://2blog.ilc.edu.tw/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 2001:288:a247:1:fc9d:9825:462d:7677 - - [24/Sep/2026:07:48:19 +0800] "-" 408 4801 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a247:1:fc9d:9825:462d:7677 - - [24/Sep/2026:07:48:19 +0800] "-" 408 4801 "-" "-"
Oct 14 06:34:24 2blog apache-access 140.111.67.10 - - [24/Sep/2026:07:48:19 +0800] "GET /" 301 273 "-" "-"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:20 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 1491 "-" "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:20 +0800] "GET /blog/active.php HTTP/1.1" 301 1026 "-" "-"
Oct 14 06:34:24 2blog apache-access 2001:288:a201::66:125 - - [24/Sep/2026:07:48:20 +0800] "GET /blog/active.php HTTP/1.1" 404 1084 "-" "-"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:20 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 35.232.47.56 - - [24/Sep/2026:07:48:20 +0800] "GET /author/t880396/page/3/ HTTP/1.1" 200 48415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access 140.111.67.195 - - [24/Sep/2026:07:48:20 +0800] "GET /wp-admin/admin-post.php?action=steps_ad HTTP/1.1" 200 1491 "-" "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:21 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 14 06:34:24 2blog apache-access 136.65.73.35 - - [24/Sep/2026:07:48:22 +0800] "GET /wp-json/wp/v2/posts/18697 HTTP/1.1" 200 17622 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
Oct 14 06:34:24 2blog apache-access ::1 - - [24/Sep/2026:07:48:22 +0800] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Ubuntu) OpenSSL/3.0.19 (internal dummy connection)"
Oct 16 01:39:00 2blog systemd[1]: Starting Clean php session files...
Oct 16 01:39:00 2blog systemd[1]: phpsessionclean.service: Deactivated successfully.
Oct 16 01:39:00 2blog systemd[1]: Finished Clean php session files.
Oct 16 01:39:01 2blog CRON[3782468]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Oct 16 01:39:01 2blog CRON[3782469]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:40:01 2blog CRON[3782514]: (root) CMD (/usr/local/bin/portal-log-push)
Oct 16 01:40:01 2blog CRON[3782516]: (root) CMD (/sbin/check_load.sh)
Oct 16 01:40:01 2blog CRON[3782515]: (root) CMD (/sbin/checkvm.sh)
Oct 16 01:40:01 2blog CRON[3782517]: (root) CMD (php /var/www/html/2blog/wp-cron.php > /dev/null 2>&1)
Oct 16 01:40:01 2blog CRON[3782519]: (root) CMD (flock -n /opt/host-agent/agent.lock timeout 270 /opt/host-agent/agent.sh >/dev/null 2>&1)
Oct 16 01:40:01 2blog CRON[3782518]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/libexec/sendmail/sendmail && /usr/share/sendmail/sendmail cron-msp)
Oct 16 01:40:01 2blog sendmail[3782559]: 69FHe17U3782559: from=root, size=317, class=0, nrcpts=1, msgid=<202610151740.69FHe17U3782559@2blog.ap2>, bodytype=8BITMIME, relay=root@localhost
Oct 16 01:40:01 2blog dbus-daemon[967]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service' requested by ':1.36827' (uid=0 pid=3782590 comm="timedatectl show --property=Timezone --value " label="unconfined")
Oct 16 01:40:01 2blog systemd[1]: Starting Time & Date Service...