CSF / LFD issue

[r00t pAsSw0rd]

Why am I getting clients complaining of such un-necessary blocks?

Sample:

200.52.92.166 # lfd: 5 (webmail,cpanel) login failures from 200.52.92.166 - Wed Nov 8 17:34:44 2006
168.144.108.18 # lfd: 5 (pop3d) login failures from 168.144.108.18 - Wed Nov 8 19:55:50 2006
24.184.144.232 # lfd: 5 (whm) login failures from 24.184.144.232 - Wed Nov 8 20:39:08 2006
12.156.88.177 # lfd: 5 (ftpd) login failures from 12.156.88.177 - Wed Nov 8 22:28:09 2006
59.95.230.119 # lfd: 5 (pop3d) login failures from 59.95.230.119 - Wed Nov 8 22:33:01 2006

So many are pop3d blocks, all "5"

What's the deal with that?

 

[ckh]

After '5' login attempts/failures they are blocked. You can adjust the setting in the configuration file.

It would indicate that your clients are having a tough time remembering their usernames/passwords....

 

[chirpy]

Indeed. Time to educate your clients on remembering their passwords, otherwise what's the difference betwene their activity and a hackers?