Some banned IPs attacks again

Thank you for your request. In firewall or another network monitor features we have timers and few steps blocking functions. You can setup time frame for ip blocking in firewall. I guess that you have setup this timers by some short timeout period. As result when our security module see this expired timeout some ip’s get enabled. I suggest you to use some long timeout values to make long period ban of attackers. It’s gonna be useful for your security level.