[SSHGuard-users] Retention time of attacks leading to blocks - measured in days ?

[Kevin B. <kev...@gm...>]

If what our logs are telling us is correct, we have recenty seen
an IP address blacklisted as follows

Blocking "IP.AD.RE.SS/32" forever \
  (4 attacks in 6 secs, after 3 abuses over 9652777 secs.)

I was slightly surprised to see that 3 abuses timespan of
111-or-so DAYS, given we are invoking SSHGuard with

   -a 40
   -p 420
   -s 1200
   -b 100:/path/to/blacklist

Given that invocation, what's likely to be remembering an
IP address for 9652777 seconds ?