Yesterday's cPanel update wasn't enough, apparently cpdavd which provides the contacts and calendar services in cPanel hosting is still exploitable, and it's only a matter of time before someone finds it, so we're closing ports 2079 and 2080 for now on the advice of cPanel, apologies for the inconvenience.
Update: We're still awaiting upstream resolution from the respective software vendors