Is the following possible? I have searched for the following but may have missed it. Sorry if I have.
I have noticed a number of attempted attacks on certain items that I have not installed for example. This rule would have multiple options in it.
When someone tries to connect to any of these items do one of the following for all future attempts
Ban the IP immediately
Do not ban the IP, but reply with a 404 Not found message for all future requests.