2012-03-12, 11:35 PM
One of my forums was attacked and went down until I blocked the IP, and this was in the logs:
Is that file normal? If so, where is it accessed normally? What does it do? And is that many requests normal?
193.224.106.234 - - [12/Mar/2012:18:51:16 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:16 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:16 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:16 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:16 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:16 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:17 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:18 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:18 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:18 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:19 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:20 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:20 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:22 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:23 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:22 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:23 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:23 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:24 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:24 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:24 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:25 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:25 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:26 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:27 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:27 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:28 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:28 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:28 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:28 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:29 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:29 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
193.224.106.234 - - [12/Mar/2012:18:51:30 -0400] "GET /jscripts/prototype.js?ver=1603 HTTP/1.0" 200 163312 "-" "Mozilla/5.0"
Is that file normal? If so, where is it accessed normally? What does it do? And is that many requests normal?