The Cpanel control panel has a detection system in which
brute force attacks are already enabled by default. When a user fails to login
with an x amount of times the system adds the ip address on a blacklist which
is regenerated in one in an hour.
If you're having this problem on their resale or dedicated
server try the following commands to make the release:
/ usr / local / cpanel / bin / cphulk_pam_ctl - disable
/ usr / local / cpanel / bin / cphulk_pam_ctl - enable
With this command you will reset the daemon that manages the
cphulk anti brute force Cpanel.