I have a web application which has recently been deployed to AWS.
In the last days, i got random requests to admin urls, like /admin.php, wp-admin.php etc. (obvious they are trying to find exploitable sections)
I want to create a blacklist of IPs accessing those urls.
Is there a list of exploitable URLs, so i capture all the IP addresses trying to access them?
I have searched on google a lot, and i could't find anything too useful.