You reached the backend. That means ingress-nginx did not find your IP in l7fm:bans.
l7fm:bans
Ban yourself via the OpenC2 deny payload in Kafka UI to see the ingress flip this response to 403 Forbidden.
deny
403 Forbidden