Some web servers have plug-ins that will attempt to obscure this tell-tale behaviour. However, the simpler measures that were already mentioned are generally enough to protect against automated attacks.