A ban pipeline targets the proxy instead of the attacker

A reverse proxy is inserted or reconfigured and automated bans later start punishing the proxy instead of abusive clients.