Instantly block IP addresses based on 404 events where the URL matches certain strings

You can add even further granularity to how you deal with malicious 404 events by monitoring each 404 URL for certain strings. In a many cases there will be 404 events produced because someone is trying to look for certain pages or files they have no business looking for other than for malicious purposes. Hence with this feature you can identify any 404 URL which contains certain strings and block that IP address instantly. For example, based on the configuration in the figure above, if an IP address produces a 404 event when it tries to locate the following URL (yoursite.com/wp-admin/js/mssqli.php) it will instantly be blocked permanently.