Regarding Brute Force Attack

[anuragjyoti]

Hello

I am new to Direct Admin Panel. I have recently purchased from my hosting company Direct Admin panel the thing is I am continuously getting message of Brute Force Attack do we have anything like cphulk in Direct Admin panel

I even blocked some ips but still its the same.

 

[anuragjyoti]

Messages of Direct Admin

 

[HostinganID]

Your server is already running csf ?
If dont, try to install config server firewall and active it.

 

[VMH-Khan]

cd ~
wget -O csf-bfm-install.sh https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/install.sh
chmod 700 csf-bfm-install.sh
./csf-bfm-install.sh

Ref: https://help.poralix.com/articles/how-to-block-ips-with-csf-directadmin-bfm

 

[anuragjyoti]

Hi,

Thanks for the reply but csf is already installed on our server
Secondly the bruteforce attack is for exim and phpmyadmin3.
what can be done?

 

[VMH-Khan]

Hi,

Thanks for the reply but csf is already installed on our server
Secondly the bruteforce attack is for exim and phpmyadmin3.
what can be done?

Kindly check above given url, it will solve your problem

 

[anuragjyoti]

hi vmaker

I tried to follow above link
wget -O csf-bfm-install.sh https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/install.sh
--2019-11-26 06:17:15-- https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/install.sh
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.0.133, 151.101.64.133, 151.101.128.133, ...
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.0.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 7337 (7.2K) [text/plain]
Saving to: ‘csf-bfm-install.sh’

100%[===================================================================================================================================================>] 7,337 --.-K/s in 0s

2019-11-26 06:17:15 (74.5 MB/s) - ‘csf-bfm-install.sh’ saved [7337/7337]

[user ~]$ chmod 700 csf-bfm-install.sh
[user~]$ ./csf-bfm-install.sh
[NOTICE] CSF/LFD was not found on your server! Going to install it...
csf.tgz: Permission denied
tar (child): csf.tgz: Cannot open: No such file or directory
tar (child): Error is not recoverable: exiting now
tar: Child returned status 2
tar: Error is not recoverable: exiting now
[ERROR] CSF/LFD failed to unpack! Terminating... echo

 

[anuragjyoti]

Hi Vmaker

I tried all the step in above yrl

But yet there are lot of notification for brute forcce attack

 

[VMH-Khan]

@zEitEr might guide you
and i hope you are login as root and install csf? as error indicate

 

[ReN]

Depending on the frequency of how hard your accounts are getting hit, and how many differing ips, look into "fail2ban" also

 

[Active8]

You dont have CSF installed properly, I advise to install it first manual to avoid problems

user ~]$ chmod 700 csf-bfm-install.sh
[user~]$ ./csf-bfm-install.sh
[NOTICE] CSF/LFD was not found on your server! Going to install it...
csf.tgz: Permission denied
tar (child): csf.tgz: Cannot open: No such file or directory
tar (child): Error is not recoverable: exiting now
tar: Child returned status 2
tar: Error is not recoverable: exiting now
[ERROR] CSF/LFD failed to unpack! Terminating... echo