why Enhanced Malicious IP Group block ip subnet?

i have problem with Enhanced Malicious IP Group pro version, my client ask about why they ip get block, when i check allow & denied, and confirm its from rule Module
Deny Rule
Rule Name
Malicious IP, but after i check from intelligence.app.safepoint.cloud, and his ip not doing something bad, can you fix this?

allow & denied

intelegence search

The SafeLine malicious IP group updates may not be synchronized with the actual threat intelligence data. You can try clicking “Update” in the IP group section. If it still gets blocked, you can whitelist this IP temporarily