All cPanel does is add a "deny" line in .htaccess .
The problem is that in the current x10 loadsharing setup, this does not work (the IP .htaccess sees is the IP of the loadbalancing server, not the IP of the request).
Manually, you can add lines like:
RewriteCond %{HTTP:X-Forwarded-For}...