Why server gives status 200 when ip is banned?

Question

Nginx

Tell me why a certain GET request from a client receives a status of 200
if this ip is included in the ban list?
Here is a line from the NGINX logs :

"GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1147

"GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1109