I’m currently using ClickUp for the following + what it’s replaced:

• Time tracking (starting today) – I used to use Toggl
• To-do lists (primary) – Used to use To-doist
  • Both for work and for personal stuff like Shopping lists
• Project Tracking (primary) – Used to use Asana/Trello/Monday + others in the past
• Company Chat – I used to use Slack

It’s starting to replace a lot of apps / functionality so I’m not bouncing from app to app throughout the day. It’s nice only using one app for a lot of different use cases. We’ll see if it can help me organize and bring synergy to my businesses.

They are everything I look for in upgraded street pads in comparison to the OEM pads. As their website says “HPS 5.0 is a Ferro-Carbon compound that provides advanced braking characteristics to enhance the driving experience. This compound combines the safety and quality of aerospace design with the braking technology of motorsports. The results are shorter stopping distances, improved performance under heavy braking conditions, and street car friendly characteristics.” – hawkperformance.com

Now they are going for around 180 for front pads (I still need to do my rear pads here shortly)

I tend to use my brakes more than engine braking, so I have a pretty good idea how they feel. A bit soft on the initial response (which I like personally). They grab nicely when you put adequate pressure. Used them in the snow for a season, and they do well with the ABS when sliding on ice.

My only gripe with them is they seem to produce more dust than the OEM – so cleaning the wheels takes a bit longer and I can live with that. I’ll certainly buy them again when I need to replace my pads on my MK7.

Note to self: When I do replace them, I’ll try to come back with the pictures and the mileage achieved with the Hawk hp street 5.0 pads

The Problem

My server load was pinned at 100%, with php-fpm processes consuming the bulk of the CPU. Using tools like htop and ps, I traced the activity back to a few specific WordPress sites hosted on the server.

The common culprit? Bot traffic hammering uncached pages and XML-RPC endpoints.

The Fix (3-Part Solution)

1. Block Bots with .htaccess

I edited the .htaccess file for each affected site and added rules to block known abusive bots by user agent:

# Block bad bots by user-agent
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
RewriteCond %{HTTP_USER_AGENT} (semrush|ahrefs|mj12bot|dotbot|python-requests|curl|wget|masscan|sqlmap|fimap|nmap|nikto) [NC]
RewriteRule .* - [F,L]
</IfModule>

This simple change started deflecting unnecessary load before it could hit WordPress or PHP.

2. Install and Configure Fail2Ban

I installed Fail2Ban to automatically block IPs that triggered suspicious patterns in my Apache logs (like repeated bot-like requests):

sudo yum install epel-release -y
sudo yum install fail2ban -y
sudo systemctl enable fail2ban
sudo systemctl start fail2ban

Then, I created a jail to detect and ban bad bots:

/etc/fail2ban/jail.d/apache-badbots.conf

[apache-badbots]
enabled = true
port    = http,https
filter  = apache-badbots
logpath = /usr/local/apache/logs/access_log
maxretry = 10
findtime = 300
bantime = 3600

/etc/fail2ban/filter.d/apache-badbots.conf

[Definition]
failregex = ^<HOST> -.*"(GET|POST).*(crawler|bot|spider|python|curl|wget).*HTTP.*"

With this in place, the server now proactively bans repeat offenders and malicious bots.

3. Restart PHP-FPM and Apache to Flush Load

Once the defenses were in place, I restarted the two main services to clear out any bloated or stuck processes:

systemctl restart ea-php81-php-fpm
systemctl restart httpd

This dropped my CPU usage almost instantly and gave the server a clean slate to work with.

Summary

After these changes:

• CPU usage dropped from 100% to <10%
• PHP-FPM processes normalized
• The server has stayed stable under load, even with continued traffic

If you’re running cPanel/WHM and notice unexplained high load:

• Check your access logs
• Filter bots at the .htaccess level
• Set up Fail2Ban to auto-ban bad actors
• And always restart PHP-FPM/Apache after config changes

CISCO DESIGNED Business CBS220-24P-4G Smart Switch | 24 Port GE | PoE | 4x1G SFP | 3-Year Limited Hardware Warranty

The CISCO CBS220-24P-4G Smart Switch is a versatile network switch designed for small to medium-sized businesses. Here’s a quick breakdown:

• Ports: 24 Gigabit Ethernet (GE) ports
• Power over Ethernet (PoE): Supports PoE, allowing it to power compatible devices like IP cameras, phones, and access points directly through Ethernet cables.
• Uplink Ports: 4 SFP (Small Form-factor Pluggable) ports at 1G each for high-speed uplinks to other network devices or the internet.
• Smart Features: Designed to offer easy configuration and monitoring, providing essential Layer 2 network features that support efficient traffic management without complexity.
• Warranty: Comes with a 3-year limited hardware warranty.

This switch is suited for businesses needing a reliable, secure, and simple solution to expand their network and support PoE devices.

Here’s the csv format for the headers and for the Folders – I couldn’t get it to link via the name so I have it cross-reference the Label ID to match the folders:
email, label
example_email@yahoo.com, Label_55

This is what the output looks like:

Here’s my code if anyone wants to make their own python script:

import os
import pickle
import pandas as pd
import base64
from google.oauth2.credentials import Credentials
from google.auth.transport.requests import Request
from googleapiclient.discovery import build
from googleapiclient.errors import HttpError
from google_auth_oauthlib.flow import InstalledAppFlow
from email.mime.text import MIMEText
from email.mime.multipart import MIMEMultipart

# Step 1: Authentication and Service Initialization
def authenticate_gmail_api():
    SCOPES = ['https://www.googleapis.com/auth/gmail.modify']
    creds = None

    if os.path.exists('token.pickle'):
        with open('token.pickle', 'rb') as token:
            creds = pickle.load(token)
    
    if not creds or not creds.valid:
        if creds and creds.expired and creds.refresh_token:
            creds.refresh(Request())
        else:
            flow = InstalledAppFlow.from_client_secrets_file(
                'credentials.json', SCOPES)
            creds = flow.run_local_server(port=0)
        with open('token.pickle', 'wb') as token:
            pickle.dump(creds, token)

    service = build('gmail', 'v1', credentials=creds)
    return service

# Step 2: Read Filters from CSV File
def read_filters_from_csv(csv_file):
    filters_df = pd.read_csv(csv_file)
    return filters_df

# Step 3: Search for Matching Emails
# Step 3: Search for Matching Emails
def search_emails(service, query):
    try:
        # Modify the query to explicitly search only within the INBOX
        query = f'label:inbox {query}'
        results = service.users().messages().list(userId='me', q=query).execute()
        messages = results.get('messages', [])
        return messages
    except HttpError as error:
        print(f'An error occurred: {error}')
        return []


# Step 4: Apply Filters and Move Emails
def apply_filters(service, filters_df):
    for index, row in filters_df.iterrows():
        email_filter = row['email']
        label = row['label']

        query = f'from:{email_filter}'
        messages = search_emails(service, query)

        if not messages:
            print(f'No emails found for {email_filter}')
            continue

        for message in messages:
            msg_id = message['id']
            # Move email to the specified folder (label)
            service.users().messages().modify(
                userId='me',
                id=msg_id,
                body={'addLabelIds': [label], 'removeLabelIds': ['INBOX']}
            ).execute()
            print(f'Email from {email_filter} moved to {label} and archived.')

# Step 5: Retrieve and List Label IDs
def list_labels(service):
    results = service.users().labels().list(userId='me').execute()
    labels = results.get('labels', [])

    if not labels:
        print('No labels found.')
    else:
        print('Labels:')
        for label in labels:
            print(f"{label['name']} - {label['id']}")

# Step 6: Main Function
def main():
    # Authenticate and create the Gmail API service
    service = authenticate_gmail_api()

    # Uncomment the line below to list all labels and their IDs
    list_labels(service)

    # Load filter rules from CSV
    csv_file = 'filters.csv'  # Replace with your CSV file
    filters_df = read_filters_from_csv(csv_file)

    # Apply filters to emails
    apply_filters(service, filters_df)

if __name__ == '__main__':
    main()

1. Most importantly drink water or if already feeling meh, mix 2/3 water with 1/3 Gatorade or some other electrolyte and sugar drink.
   • If already feeling meh after flying – drink some warm bone broth
2. Dark chocolate prior to flying helps? Not sure why but chocolate in general is good before a flight
3. Lysine or L-lysine – is an essential amino acid protein block. It’s used for building proteins and it’ll help boost your immune system. It can be found in meat fish, dairy, eggs, and supplements. Take 500mg before flying.
4. Glutathione – is a Master anti-oxidant that is capable of preventing damage to important cellular components caused by sources such as reactive oxygen species, free radicals, peroxides, lipid peroxides, and heavy metals.

2FA Availability

That’s the thing that I’m frustrated with at the moment, not all major companies offer Two Factor Authentication via a true 2FA App or even better a YubiKey physical key. Banks are the biggest offender of this. They might offer 2FA via your phone or email verification token, but as we all should know, your phone and your email ARE NOT SECURE EITHER. What do I have to do to get USBank and other major Banks to offer the best of the best in security for access to our digital currency?

All it takes is a hacker taking control of an email, or SIM jacking your phone number, and presto – they have access to the remainder of your personal information and money. Quite scary if you ask me.

Now that I’m looking into this I’m finding that Bank of America – BOA has the highest online security including support for YubiKey. That might be everyone’s best bet, especially large targets like Whales.

[insert picture of a whale]

“Whaling is a highly targeted phishing attack – aimed at senior executives – masquerading as a legitimate email. Whaling is digitally enabled fraud through social engineering, designed to encourage victims to perform a secondary action, such as initiating a wire transfer of funds.”

SIM Jacking

Okay so I don’t have a solution for this, unfortunately, most carriers allow for a sim lock but that has its flaws, as someone with enough information could bypass that over the phone with a telecom customer service rep.

It would be cool if a startup or a current telecom company just made a High-security mode for your account/phone numbers linked to the account, which locks the phone number from being replicated to a different SIM without an In-Person double identity verification process. Possibly with fingerprint verification, again in-person to add a barrier to socially engineered methods like SIM jacking.

I think this is essential for everyone as our lives now live on our phones, and realistically I’ve noticed most people are less secure with their mobile devices than they are with their desktop computers. When in the real world your phone/phone number should be more important to protection as it ends up being that 2FA step that malicious entities would have to overcome, and currently it’s doable with the right attack vectors. No seriously how are these multi-millionaires not terrified that with their mindset in cyber-security and when they are targeted, they would be hacked in a matter of hours, not days or weeks? Leaving massive financial risk based on one of 3 attack vectors, compromised email, compromised mobile device, or a socially engineered SIM jacking.

Get a Yubico Key for your personal or business cyber-security.

I added google, Gmail, and youtube to the whitelist, and tested resetting DHCP and DNS. The only thing that seemed to work temporarily was to restart the pfsense device. I searched bing.com for the first time in years, also google on my phone, and none of the forums had the answer. One post on reddit even said “It’s not pfsense, this is known in the industry as a layer 8 issue. Check pfblocker logs and look for the blocks. A note on the whitelist, sometimes you may need to clear your state table (shouldn’t have to but with any rule changes, clearing the states is a good troubleshooting thing)” Reading this, I felt hopeless and went to bed.

The next day, I cleared the states, and nothing still. The problem this time was permanent on my desktop but periodic for other devices that were on the wifi, which confused me more. So then, by finally looking through the proper logs, I found in pfblockerng that IP’s which I crossed referenced as googles servers, were being blocked by the “Block snort2c hosts” rule in the firewall. Okay, so I searched the snort2c table to find those exact IPs from google. Finally!

My current solution (which is still a work in progress) was to reset the snort2c table, which for some reason had the resolved google servers for google.com on the block table. I realized that even though I had whitelisted www.google.com and google.com, they were being blocked because pfblockerng / snort2c added the resolved google IP as a block.

Now all I need to do is diagnose why the rule in pfblockerng is causing the snort2c block, regardless of the addition of google to the whitelist. I’ll post an update when I find the best solution vs. just resetting the snort2c table.

Update | 10-6-2022

I’ve got an update to this post and so even though pfblockerng is showing the blocked IPs from google, apparently, Suricata is to blame. Hold on, I’m no pfsense master, just a humble student of networking, I’ll get to the point.

After some additional research on the all-mighty google – I think I might have found a solution (still testing the viability at the moment). Seems as though the best solution is to have a modified “Remove Blocked Hosts Interval” of 1 hour.
“Please select the amount of time you would like hosts to be blocked. Note this setting is only applicable when using Legacy Mode blocking! This setting is ignored when using Inline IPS Mode.
Hint: in most cases, 1 hour is a good choice.”

To find this setting: Services -> Suricata -> Global Settings -> towards the bottom [Remove Blocked Hosts Interval]
I changed mine from 4 days to 1 hour in hopes that google IPs being blocked by snort will at least be removed at a faster rate than before in my configuration.
I also chose to turn on logs for Suricata below the remove blocked hosts setting.

References:
https://forum.netgate.com/topic/131510/pfsense-keeps-blocking-google-com-i-lost-all-hope
https://www.reddit.com/r/PFSENSE/comments/oq4s6s/pfsense_blocking_googlecom_and_searches_but/
https://forum.netgate.com/topic/171592/suricata-blocking-google-gmail
https://www.reddit.com/r/PFSENSE/comments/qnhqvr/help_100_packet_loss_on_wan_link_not_isp_does_not/

***https://forum.netgate.com/topic/137889/snort/2*** Solution

If you’re looking into how to automate and set up a smart home/apartment, these are my recommendations based on what I’ve bought and what I think would work great in any smart apartment setup.

For software, I’m currently using the Smart Life App in tandem with Alexa to control switches, devices, and lights in my apartment. The reviews of this app recently aren’t the best, still comes with a 4.7 rating overall and I’ve only had minor issues with the app, nothing detrimental, fortunately.

The first smart outlet I got was this Tantan Mini Smart Plug that works with Alexa and Google Home on amazon (no longer Tantan but Wisebot) It works well, and the upside is the button status light is off when off (unlike the next sensor) The main issue with this one is that you aren’t applying to plug in 2 at the same time which is a real bummer – it’s also lacking a few minor features

Now the next sensor I picked was this BN Link wifi Smart Plug. It comes in a heavy-duty 4 pack. Works with Google Assistant and Alexa of course. The good about this switch is that you can fit 2 or more stacked vertically (but not horizontally unless the outlet is wide enough). It also supports electric usage tracking directly in the app. The bad about this switch is that the status light is ALWAYS on.. You could probably tweak this but out of the box it’s a bit clunky

For the Garage, we got a triple plug that is a single switch for all three plugs. Works great for turning on battery tenders, and power tools in the garage.

And the one for the patio is a dual plug with the ability to control each individual plug. Made for outdoor use which is great for outside patio lights that I have plugged into this switch.

I have an older Alexa dot in the living room and a newer dot in the office both of which provide enough coverage to be heard from almost everywhere in our 1000sqft apartment.

For lighting, I have a lamp with a Sengled Smart bulb in the living room which works great for evening lighting.

For the kitchen, I have a non-smart LED kit under the cabinets which is on one of the Tantan switches mentioned above. I have it set to 50% brightness on the manual controller for the kit which works great for nighttime lighting. Swap the kit to 100% and it’s fantastic for lighting whilst cooking.

For bathrooms and hallways at night, I have these nifty little nightlights that have auto on/off. I’m unable to stack them vertically or with other large device plugs next to them, but they work great for a less harsh green light for those nightly bathroom trips.

Now this, makes the list ULTIMATE. The Coffee warmer 9000, just kidding, but seriously this coffee warming plate I found is amazing when paired with a smart switch for telling, “Alexa, turn on the coffee heating plate”, and voila, your coffee is being heated to either 131F/149F/167F which can keep coffee hot for hours at the 131/149 settings. 167 is steamy or is great for heating up lukewarm coffee in under 5 minutes!