I guess moving admin to a non-default path and dropping connections on default paths should work. nginx has a special 444 status code for dropping the connection [0]

[0] https://stackoverflow.com/questions/20709549/drop-unwanted-c...