Thank you Peter. Through your instructions I discovered that all of the people blocked had the following rule listed: Malicious File Upload (PHP)?
I have gone ahead and unchecked the Malicious File Upload (PHP)?rule.
I just want to confirm that you assume this should fix this issue in future, and that our site should still be relatively secure, as other rules and checks should find any malicious files.
Thanks for your help.