This function provides a default list of paths that should result in a banned IP address. While not as complete as https://github.com/fail2ban/fail2ban in terms of requests that are flagged as invalid, most site scanning tools look for Wordpress, Java and Microsoft servers and these default rules are enough to catch most offeneding requesters.