防止锤击/脚本parsing器

你怎么能防止脚本可以通过path和dirs的服务器?

从Apache的error.log:

[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/scripts [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/admin [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/admin [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/admin [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/db [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/dbadmin [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/myadmin [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/mysql [Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/mysqladmin [Thu Jul 07 11:28:14 2011] [error] [client 91.121.134.32] File does not exist: /var/www/typo3 [Thu Jul 07 11:28:14 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpadmin [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpMyAdmin [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /usr/share/phpmyadmin/scripts [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpmyadmin1 [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpmyadmin2 [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/pma [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/web [Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/xampp [Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /var/www/php-my-admin [Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /var/www/websql [Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /usr/share/phpmyadmin/scripts [Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpMyAdmin 

如果你的主机是linux,你可以安装软件,然后尝试fail2ban或denyhosts 。 两者都应该在您的分销回购中可用。

我会看看mod_security ,或者你可以编写自己的自定义访问规则