How to prevent others from scanning your website with vulnerability scanning tools

A small website, written in nodejs, but the log appears from time to time:

<code>umbrella-web-0 (err): 24/7 05:25 [3952] - error: //admin/scripts/setup.php
umbrella-web-0 (err):  TypeError: req.csrfToken is not a function
umbrella-web-0 (err):     at Object.apiController.getConfig
umbrella-web-0 (err):     ...</code>

Later I checked that it was a php injection script. Although it did not affect the website, it was annoying to see. How can I get rid of this thing?

Reply content:

A small website, written in nodejs, but the log appears from time to time:

<code>umbrella-web-0 (err): 24/7 05:25 [3952] - error: //admin/scripts/setup.php
umbrella-web-0 (err):  TypeError: req.csrfToken is not a function
umbrella-web-0 (err):     at Object.apiController.getConfig
umbrella-web-0 (err):     ...</code>

Later I checked that it was a php injection script. Although it did not affect the website, it was annoying to see. How can I get rid of this thing?

Set ip request frequency
Filter sql keywords