How to block bots that are looking for vulnerabilities?

Question

PHP

Good evening, I need help in resolving the issue. More than a year go to the error log from bots, as I understand it, who are looking for vulnerabilities. Is it possible to block them via cloudflare or on nginx?
You can track them on the first request, since wp-login.php is always the first, which I don’t have, in principle, as well as links to it.
The solution is preferably in php.
Example log:
[Sun Feb 02 09:46:31.065958 2020] [php7:error] [pid 1873] [client 105.111.23.197:40818] script '/home/admin/web/site.ru/public_html/wp-login. php' not found or unable to stat

Answer 1

yes, anyone saw an example of a log
on Cloud, click there in the security, but the norm for 200 bucks just starts
nginx is also full , but there is no limit to perfection, the
main thing is to remember: if you use a script, it can be hacked, if you use WordPress, it must be hacked