I run CSF/LFD on several cPanel servers. I'm very happy with it and LFD always emails me whenever an IP tries too many logins and triggers a temporary block.
I was asking myself (and now asking you guys

I read the docs but I can't find a clue

Thanks in advance for your help!
Francesco