From what I gather, if you don’t deny at first, it will keep sending the request every 2 minutes for 10 minutes. If you do deny, they can simply do the command again, and the cycle begins once more.