x.x.x.x # lfd: 5 (cpanel) login failures from x.x.x.x in the last 300 secs - Mon Jan 19 20:06:44 2009
Would it be possible to know if this was an actual /cpanel or :2083 attempt vs. webmail or whm? This could help with overall granularity and deciding on what to set as permanent blocks or temp blocks, thanks.