Use cPanel → Security → Leech Protection for a directory that already uses or will use Directory Privacy.
- Select the directory.
- Set the maximum logins allowed for each user within two hours.
- Optionally configure a redirect and alert address.
- Choose whether accounts that exceed the limit should be disabled.
- Enable the protection.
Use a threshold that matches legitimate usage. An unrealistically low limit can block normal users who access many resources.