bugfix: ban by IP