diff --git a/files/routes/wrappers.py b/files/routes/wrappers.py
index b6b154ca9..2ddd728f2 100644
--- a/files/routes/wrappers.py
+++ b/files/routes/wrappers.py
@@ -61,9 +61,14 @@ def calc_users():
 		else:
 			ddos_threshold = 1000
 
-		if g.loggedout_counter > ddos_threshold and not get_setting('under_attack'):
-			toggle_setting('under_attack')
-			set_security_level('under_attack')
+		if g.loggedout_counter > ddos_threshold:
+			if not get_setting('under_attack'):
+				toggle_setting('under_attack')
+				set_security_level('under_attack')
+		else:
+			if get_setting('under_attack'):
+				toggle_setting('under_attack')
+				set_security_level('high')
 	return ''
 
 def get_logged_in_user():