Where are the CSF/LFD logs?
The log files that CSF and LFD use are the following:
The log contains any failed login attempts, as well as IP addresses that have been blocked by CSF.
Contains lists of IP addresses that have been blocked. For each entry, it shows the date the IP address was blocked and the reason.
Contains lists of IP addresses that have been whitelisted.