Some behaviors get you on the naughty list immediately - trying to access an .env or execute a http CONNECT action.
Other behaviors only get you on the list if you repeat them often - trying to access a .php file or wordpress file (of which I have none) or generating requests too fast (429) or hunting for files that don't exist (404) or aren't allowed (403).
