ConfigServer Community Forum

Unless you are using X-server you are safe to remove that directory altogether.

How does the log file look? It could be hitting it with too many connections, too many invalid passwords, etc.

Absolutely normal and why csf's brute force defense protection is such an asset.

I recommend enabling some of the csf blocklists in the csf.blocklists file. Many block Russia altogether via the country block section of the config.

Check your pasv port range config for your ftp daemon (pureftpd/proftpd/etc) and add that range to the tcp range in csf configuration.

ICMP echo reply. Enable it in the configuration file. /etc/csf/csf.conf or through the cPanel interface.