By default your SonicPanel protects login and API from brute force attacks.The login failure limit is 5 times in 1 hour.More than 5 login failures will result an IP ban for 1 hour.Contact Support if you can not wait one hour.