webserver using obstructed url

How would you protect from these attacks?