Cpanel: local brute force attack

[fernandomm]

Hi,

We had a brute force attack made from a local script to cpanel. Cphulk and csf didn't blocked because it was coming from the local ip.

Is there a way to protect a server against these kind of attacks?

The script was uploaded due to a security issue on Joomla and them attacker simply ran the script by accessing via browser

Thanks..

[Bahram0110]

Hi,
This is a big problem.
I'm searching for its solution too..

[nobodyk]

use csf

ConfigServer Security & Firewall

[SoftDux]

use csf

ConfigServer Security & Firewall

If I'm not mistaken the OP is already using CSF. Or did you miss that?

[nobodyk]

By local do you mean another server on the same network? If so, CSF does a nice job blocking those.

[cwalke32477]

By local do you mean another server on the same network? If so, CSF does a nice job blocking those.

I beleive tho OP is stating that the brute came from within the server itself, since it's the local internal IP (127.0.0.1 most likely) it would circumvent CSF and built in Brute protection.