[ku1ik]

I did that and it works great.

Specifically, I use fail2ban to count the 404s and ban the IP temporarily when certain threshold is exceeded in a given time frame. Every time I check fail2ban stats it has hundreds of IPs blocked.

[zepearl]

Same here - fail2ban then adds the IP to my nftables fw