Have a server that, while reviewing the logs, appears to get hit many many many times a day via the direct ip address by automated scripts looking for vulnerabilities. Entries like:

[Sat Jul 31 17:45:01 2010] [error] [client xxx.xxx.xxx.xxx] script '/var/www/phpMyAdmin' not found or unable to stat

I run a number of virtual servers on this system, but nothing at the direct IP. All of these attempts are resulting in a 404, which is fine, but I'd rather not even have the server respond. Any way to configure, say /sites-available/default to simply drop every request it receives?

Thanks

link|improve this question
1  
Identical to this, answered here: serverfault.com/questions/175679/… – troyengel Sep 10 '10 at 16:38
Thanks, that did it. – Paul Sep 10 '10 at 16:45
feedback

1 Answer

up vote 1 down vote accepted

If you don't have a default site, it will use the first vhost applicable for site unless I'm wrong. Just use a default vhost that doesn't do anything and returns 404 or 403 for everything.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.