alter the dcc ports mirc is using to something like 5001-5009, you maybe getting inbound dcc traffic detected as penertration attempts due to the ports mirc is telling the dcc to use

alt-o / connect / options / advanced / first & last & maybe tick use random ports