boot force attack

[romanepo]

Hi,
after blocked ip,i see same ip's again attack my server.That cause my server Load Averages: 30.64 36.48 35.89

How to i resolve this issue.i using ConfigServer Security & Firewall

Best Regards
Roman E

 

[24x7server]

Hello,

I will suggest you please enable "cPHulk Brute Force Protection" on your server so that attacker IP will be block automatically in cPHulk DB and also enable login failure daemon in your CSF firewall setting.

And regarding the load issues. Please check current ruining process on your server through "top" and "ps aufx" command

 

[cPanelMichael]

Hello

You should block the IP addresses through your CSF firewall application. The IP addresses should not continue to make additional connections after they are blocked. cPHulk brute force detection will prevent authentication, but it will not block the IP addresses from making a connection to your server.

Thank you.