OK now in the logs I see the new format,
Brute force detected for IP [XXX.XXX.XXX.XXX], throttle.
2018-01-10 23:49:37.523 [NOTICE] [XXX.XXX.XXX.XXX:42318] Brute force detected for IP [YYY.YYY.YYY.YYY], throttle.
where XXX.XXX.XXX.XXX remains the Cloudflare Railgun server on my network and...