Most of these panels and login systems have bruteforce protection already in place. If a certain user can't login after (x) amount of tries they are locked out for a little bit.
Back in the day you could brute panels real easily, but now it's just pointless. Try going with FTP bruteforcing.