Crowdsec will analyse the logs from your reverse proxy and identify malicious actors, bots and whatever else you configure it to. It then tells a “bouncer” (part of your reverse proxy) to reject the request, block the IP or redirect them to a captcha.
The downside is that it’s kinda a pain to get set up, at least in my experience. It also stopped working without informing me and I’ve never been able to get it working again since. If you don’t use docker the experience might be a bit easier.