There is something wrong with the "login autoban". The account names are displayed on the website and anyone can use them to fail login and cause autoban the account. Someone does that manually or with some bot. Everyone are banned. nobody plays the server. Fix this. Hide accounts names from the website. Unless you want everyone to access them.