I have noticed a lot of hackers trying to penetrate my system by making requests for certain paths on my webserver that don't resolve to anything.
Examples: /config/pwtoken_get, /_vti_bin/_vti_aut/author.dll, /xampp/phpmyadmin/index.php, /admin/index.php etc.
What I would like to do is auto-blacklist an ip after it attempts to request such a path. Does anyone have any pointers on how I'd accomplish this?
Thanks!