fail2Ban for obvious scam scanner connections

hello everybody.

Apologies but my Linux skills are still rusty.

I was wondering if anybody had set up an Apache or NGINX jail to capture IP addresses that are trying to connect to API or administrative URLs.

I am using the default Apache filter and have enabled to jail, but I was wondering if anybody had any best practices?