Someone or virus spam WHM login root and script disable us

for security its recommended to keep enabled this protection.
Quote:
Yes, you are having this problem since the brute force protection is enabled in your server. You can disbale this following those steps: WHM >> Security >> Security Center >> cPHulk Brute Force Protection.

just enter your IP address as Trusted Hosts List in brute force protection & you won't be blocked again.

i also have the same problem before 6th months & i did this after then i never blocked again by brute force

 

This is also in the Security Center:

Host Access Control (block IP access)

Host Access Control allows you to allow or deny access to your server or specific services based on the IP address of the incoming request.

 

If you are comfortable with the command line, you may also wish to consider moving SSH off its standard port to reduce the brute forcing performed against your root account. Some system administrators also require logging in as a wheel user first before being able to login as root for added security. That would need to be setup via the command line.