I’m currently having trouble keeping my site visible for public.
The site is actively tried to be hacked at least 20-30 times a day. Until 2 months ago AiO Security worked flawlessly blocking those and I’ve been able to blacklist a huge amount of IP ranges.

The issue is that once an IP is automatically blocked after failed login (especially IPv6 addresses, which results in a wildcard block for all addresses; I do think that’s a bug), the whole site stays blocked for public; every visitor is redirected to 127.0.0.1.

Luckily I excluded the manually excluded (changed) login page, so I’m always able to login and simple delete all page cache (I’m using W3 Total Cache with Redis). The site works again immediately after that.

I first thought it might be obvious that something’s wrong with the caching, but there has been no issue until 2 months ago with NO changes being made in settings.
Hence, I hope there’s a simple solution to this without me needing to clean the cache a couple of times a day.
I probably am missing out on a simple setting or need to exclude something so SOMETHING is not being cached permanently when a hacker/IP is being blocked after a failed login attempt.