I clearly remember failtoban in NS7 banning an ip for failed login attempts for a period of time with the option in the NS7 ui to permaban said ip.
That is literally the above scenario.
Does this help explain what I’m saying? Fail2ban — NethServer 7 Final