ls jail.d/ cat jail.d/defaults-debian.conf vim jail.d/pingora-tls.conf systemctl restart fail2ban fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls nft list ruleset grep -r 'jail.d' vim jail.conf fail2ban-client status pingora-tls systemctl status fail2ban fail2ban-client status fail2ban-client status pingora-tls fail2ban-client status fail2ban-client -d 2>&1 | grep -i pingora nft list ruleset fail2ban-client status pingora-tls cat /etc/fail2ban/jail.d/pingora-tls.conf vim /etc/fail2ban/jail.d/pingora-tls.conf vim /etc/fail2ban/jail.d/pingora-tls.conf systemctl restart fail2ban fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls nft list ruleset nft list ruleset fail2ban-client status pingora-tls fail2ban-client status fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls btop exit fail2ban-client status pingora-tls fail2ban-client status pingora-tls fail2ban-client status pingora-tls echo "Log Clear" > /var/log/pingora.log df -hPl exit df -hPl cd /var/log/ history | grep Clear echo "Log Clear" > /var/log/pingora.log df -hPl df -hPl history | grep echo echo "Log Clear" > /var/log/pingora.log df -hPl exit ls cd /etc/fail2ban/ ls vim jail.conf grep -r ignoreip ./ vim jail.conf grep -r ignoreip ./ vim jail.conf systemctl reload fail2ban fail2ban-client unban 3.21.209.114 fail2ban-client unban 65.132.158.226 fail2ban-client unban 66.223.60.12 fail2ban-client unban 66.223.60.126 exit cd /mnt/nfs_mount/ ls cd live ls cd nouveauservices.com ls openssl x509 -in cert.pem -noout -issuer openssl x509 -in cert.pem -noout openssl x509 -in cert.pem openssl x509 -in cert.pem -text -noout clear openssl x509 -in cert.pem -text -noout ls openssl x509 -in cert.pem -text -noout clear ls openssl x509 -in fullchain.pem -text -noout clear ls openssl x509 -in cert.pem -text -noout openssl x509 -in cert.pem -pubout openssl x509 -in privkey.pem -pubout openssl pkey -in privkey.pem -pubout openssl pkey -in privkey.pem -pubout -text -noout clear ls cd /mnt/nfs_mount ls cd nfs_mount/ ls cd .. ls cc archive ls cd archve cd archive ls cd nouveauservices.com cd .. clear l,s clear ls cd live cd nouveauservices.com ls cd .. cd nvslegacy.com/ ls openssl x509 -in cert.pem -text -noout exit history | grep pingoria.log history | grep pingora.log echo "Log Clear" > /var/log/pingora.log df -hPl history | grep echo echo "Log Clear" > /var/log/pingora.log df -hPl exit df -hPl history | grep echo crontab -e which echo crontab -e crontab -l /usr/bin/echo "Cron Log Clear" > /var/log/pingora.log df -hPl exit ls -la mkdir rollbacks cp /bin/pingora-service rollbacks/pingora-service-09-07-2026 ls -la mv pingora-service /bin/pingora-service systemctl reload pingora systemctl status pingora tail -f /var/log/pingora.log more /etc/nftables.conf exit vim /etc/crowdsec/config.yaml exit whoami apt update apt install crowdsec crowdsec crowdsec-firewall-bouncer-nftables curl -s https://install.crowdsec.net | sudo sh apt update apt install crowdsec crowdsec crowdsec-firewall-bouncer-nftables clear systemctl status crowdsec-firewall-bouncer journalctl -u crowdsec-firewall-bouncer.service clear cscli lapi register -u http://10.0.1.138:8080 --machine pingora-proxy-ia-prod-1 vim /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml systemctl restart crowdsec-firewall-bouncer.service systemctl restart crowdsec cscli alerts list nft list ruleset more /etc/crowdsec/config.yaml clear exit exit systemctl status pingora journalctl -fu pingora journalctl -u pingora history dmesg systemctl status fail2ban.service cd /var/log/ ls -l cd apt ls -l tail -100 history.log tail -50 term.log tail -100 history.log tail -50 term.log tail -50 term.log ls -l vim ../syslog cd .. ls -l vim syslog.1 cd apt/ ls -l vim eipp.log.xz vim term.log gunzip term.log.1.gz vim term.log.1 gzip term.log.1 cd .. cd unattended-upgrades/ ls -l vim unattended-upgrades.log gunzip unattended-upgrades.log.1.gz vim unattended-upgrades.log.1 vim unattended-upgrades-dpkg.log cd /etc/apt ls -l cd /etc/ vim /etc/apt/apt.conf.d/50unattended-upgrades vim /etc/apt/apt.conf.d/99needrestart cd needrestart/ ls -l cd conf.d/ ls -l cat teleport.conf vim pingora_service.conf cat pingora_service.conf ls -l chmod 644 pingora_service.conf ls -l realpath realpath pingora_service.conf cat /etc/needrestart/conf.d/pingora_service.conf cd systemctl status pingora.service fail2ban-client banned fail2ban-client banned | grep '62.4.39.132' fail2ban-client status fail2ban-client get pingora-tls banip | tr ' ' '\n' fail2ban-client get pingora-tls banip | tr ' ' '\n' | grep '151.115.100.25' fail2ban-client get pingora-tls banip | tr ' ' '\n' | grep '93.127.200.74' systemctl status fail2ban cd /etc/fail2ban/ ls cat fail2ban.conf grep -r "EOF" ./ vim filter.d/pingora-tls.conf cp filter.d/pingora-tls.conf filter.d/pingora-tls-2.conf vim filter.d/pingora-tls-2.conf rm filter.d/pingora-tls-2.conf exit ls -la cd rollbacks/ ls cp /bin/pingora-service pingora-service-09-21-2026 cd ~ ls ls -la mv pingora-service /bin/pingora-service systemctl reload pingora exit cd / ls cd mnt ls cd nfs_mount/ ls cd accounts ls | head -5 cd ../nfs_mount ls | head -5 ls cd ../ cd live ls | head -5 cd hiddenlotus.cloud ls ls -als ls -la cat rollbacks/ ls rollbacks/ cp /bin/pingora-service pingora-service-09-30-26 ls -la cp /bin/pingora-service rollbacks/pingora-service-09-30-26 ls -la rm pingora-service-09-30-26 mv pingora-service /bin/pingora-service systemctl reload pingora btop exit dmesg free -g htop apt install htop htop dmesg dmesg | tail exit dmesg cd /etc/sysctl.d/ ls -l sysctl net.netfilter.nf_conntrack_max grep net.netfilter.nf_conntrack_max ./* sysctl ipv4.tcp_mem sysctl net.ipv4.tcp_mem ls cd /etc/fail2ban/ ls nft list ruleset nft list ruleset exit ls -la cd rollbacks/ ls cp /bin/pingora-service pingora-service-10-13-26 cd ../ ls ls -la mv pingora-service /bin/pingora-service systemctl reload pingora systemctl status pingora btop exit nft list ruleset nft list ruleset | grep 35.166.90.253 nft list ruleset | grep 52.24.58.22 sudo nft list ruleset 2>/dev/null | grep '52.24.58.22' sudo nft list ruleset 2>/dev/null | grep '35.166.90.253' exit ls cd /etc/fail2ban/ ls grep -r white grep -r 66\ grep -r 66 vim jail.conf systemctl reload fail2ban systemctl status fail2ban exit btop exit nft list ruleset exit nft list ruleest nft list ruleset nft list ruleset | tail -n 50 vim /etc/nftables.conf vim /etc/nftables.conf vim /etc/nftables.conf nft list table ip nat nft list table ip nat nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 nft list ruleset | tail -n 30 sysctl net.mptcp.enabled exit clear cd /etc/crowdsec/ clear ls sudo cscli parsers install crowdsecurity/syslog-logs crowdsecurity/dateparse-enrich vim parsers/s01-parse/pingora-logs.yaml cd parsers/s01-parse/ ls ls -lah chmod 777 pingora-logs.yaml mv pingora-logs.yaml /etc/crowdsec/hub/parsers/s01-parse/pingora-logs.yaml ln -s /etc/crowdsec/hub/parsers/s01-parse/pingora-logs.yaml pingora-logs.yaml ls -lah cd .. cd .. cd scenarios/ ls ls -lah vim /etc/crowdsec/hub/scenarios/pingora-429.yaml chmod 777 /etc/crowdsec/hub/scenarios/pingora-429.yaml ln -s /etc/crowdsec/hub/scenarios/pingora-429.yaml . ls -lah cd .. cd acquis.d/ ls ls -lah vim pingora.yaml chmod 777 pingora.yaml cd .. vim profiles.yaml crowdsec -t cscli explain --file /var/log/pingora.log --type pingora -v systemctl restart crowdsec cscli decisions list cscli decisions list cscli decisions list cscli decisions list cscli decisions list -a cscli decisions list -a | grep pingora cd /var/log ls tail -n 500 pingora.log > short-pingora-log.txt more short-pingora-log.txt clear cscli explain --file /var/log/short-pingora-log.txt --type pingora -v sudo ls -l /etc/crowdsec/parsers/s01-parse/pingora-logs.yaml sudo ls -l /etc/crowdsec/parsers/s01-parse/pingora-logs.yaml sudo crowdsec -c /etc/crowdsec/config.yaml -t sudo cat /etc/crowdsec/parsers/s01-parse/pingora-logs.yaml vim /etc/crowdsec/parsers/s01-parse/pingora-logs.yaml systemctl restart crowdsec cscli explain --file /var/log/short-pingora-log.txt --type pingora -v cscli parsers list cscli decisions list -a | grep pingora cscli decisions list -a | grep 429 # Confirm the symlink was replaced with a regular file. sudo ls -l /etc/crowdsec/parsers/s01-parse/pingora-logs.yaml # Check which directories CrowdSec actually uses. sudo grep -nE '^[[:space:]]*(config_dir|hub_dir|index_path):' /etc/crowdsec/config.yaml # Show discovery warnings and the installed version. sudo cscli -c /etc/crowdsec/config.yaml --debug parsers list sudo cscli version clear cd /etc/crowdsec/ ls cd parsers/ ls cd s01-parse/ ls -lah rm pingora-logs.yaml mv /etc/crowdsec/hub/parsers/s01-parse/pingora-logs.yaml . cd .. cd .. ls cd scenarios/ ls ls -lah rm pingora-429.yaml mv /etc/crowdsec/hub/scenarios/pingora-429.yaml . cd .. cscli explain --file /var/log/short-pingora-log.txt --type pingora -v systemctl restart crowdsec ls -la cd rollbacks/ ls cp /bin/pingora-service pingora-service-11-04-26 cd ~ ls -la mv pingora-service /bin/pingora-service systemctl reload pingora tail -f /var/log/pingora.log tail -f /var/log/pingora.log cd /var/log ls -la ls -la ls -la ls -la ls -la ls -la lsblk btop systemctl status crodsec systemctl status crowdsec btop exit vim /etc/crowdsec/ cd /etc/crowdsec/ ls vim profiles.yaml vim scenarios/pingora-404.yaml crowdsec -t systemctl restart crowdsec crowdsec scenarios list crowdsec list scenarios chmod 777 scenarios/pingora-404.yaml systemctl restart crowdsec cscli scenarios list vim scenarios/pingora-404.yaml clear exit systemctl status crowdsec cscli scenarios list systemctl | grep bouncer systemctl status crowdsec-firewall-bouncer systemctl restart crowdsec systemctl restart crowdsec-firewall-bouncer more /var/log/crowdsec.log tail -n 500 /var/log/crowdsec.log systemctl restart crowdsec systemctl restart crowdsec-firewall-bouncer clear ls clear ls cd /etc/crowdsec ls clear ls cd scenarios ls copy pingora-429.yaml pingora-429-strict.yaml cp pingora-429.yaml pingora-429-strict.yaml vim pingora-429-strict.yaml rm -rf pingora-429-strict.yaml vim pingora-429.yaml cd .. vim profiles.yaml systemctl restart crowdsec