Bug or Feature: Intrusion detection blocks a whitelisted IP

Could it be this thread ?

I also posted for a similar problem in the past: