try to change values: 1. Average intrusion frequency alert threshold: This setting is per second 2. Intrusion alert threshold window: This setting is in minutes.
for example if Average intrusion frequency alert threshold is set to 3, and Intrusion alert threshold window is set to 2, that would mean you would have to get 3 attempts per second over 2 minutes to alert, 3 * 120 = 360 events within 2 minutes. Default is 60 events within 1 minute