Change default log level to ERROR instead of disabled
Set all failed logins from same IP as handled when blocking (don't restrict by username)