Multimaster

can someone explain what is going on with that waf, it returns results in one req and null on that same req after couple tries of other payloads, i thought there should be no lockouts on the boxes ?