I have IPs attempting to probe our web server trying to find open URLs. The two known methods are attempting to find specific nodes on our drupal site, or attempting the ../../../../ trick to try and access the root of the web server.
Both tricks don't do anything against us, but LogWatch sometimes returns that the probing may have been successful returning a 200 HTTP request.
Is there any measures I should be taking to counter this?