<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial'; COLOR: #000000">
<DIV>Dear Suricata</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>I’m facing lot of attack to my Apache for example to the path
/usr/local/apache/htdocs and on error_log show as:</DIV>
<DIV> </DIV>
<DIV>[Sun Sep 30 05:33:40.605498 2018] [:error] [pid 25084] [client
192.144.164.246:16666] File does not exist:
/usr/local/apache/htdocs/help.php</DIV>
<DIV>[Sun Sep 30 05:33:40.959279 2018] [:error] [pid 21760] [client
192.144.164.246:16773] File does not exist:
/usr/local/apache/htdocs/tiandi.php</DIV>
<DIV>[Sun Sep 30 05:33:41.321576 2018] [:error] [pid 1804] [client
192.144.164.246:16864] File does not exist:
/usr/local/apache/htdocs/miao.php</DIV>
<DIV>[Sun Sep 30 05:33:41.670767 2018] [:error] [pid 3712] [client
192.144.164.246:16931] File does not exist:
/usr/local/apache/htdocs/xz.php</DIV>
<DIV>[Sun Sep 30 05:33:42.015335 2018] [:error] [pid 31462] [client
192.144.164.246:17003] File does not exist:
/usr/local/apache/htdocs/linuxse.php</DIV>
<DIV>[Sun Sep 30 05:33:42.372111 2018] [:error] [pid 21759] [client
192.144.164.246:17140] File does not exist:
/usr/local/apache/htdocs/zuoindex.php</DIV>
<DIV>[Sun Sep 30 05:33:42.718339 2018] [:error] [pid 3653] [client
192.144.164.246:17240] File does not exist:
/usr/local/apache/htdocs/zshmindex.php</DIV>
<DIV>[Sun Sep 30 05:33:44.217790 2018] [:error] [pid 25016] [client
192.144.164.246:17415] File does not exist:
/usr/local/apache/htdocs/ceshi.php</DIV>
<DIV>[Sun Sep 30 05:33:44.565297 2018] [:error] [pid 1669] [client
192.144.164.246:17528] File does not exist:
/usr/local/apache/htdocs/boots.php</DIV>
<DIV>[Sun Sep 30 05:33:44.959865 2018] [:error] [pid 25084] [client
192.144.164.246:17622] File does not exist:
/usr/local/apache/htdocs/she.php</DIV>
<DIV> </DIV>
<DIV>So how to make a rules with that kind of attack?</DIV>
<DIV> </DIV>
<DIV>Please advice. Thank you so much</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></DIV></DIV></BODY></HTML>