can I do that with non existing domains or mal. login attemps in a nginx config? That would maybe slow down the attackers a little :)