I saw a previous lot of these in the NAML logs, and cleared the logs.
On rechecking there are more, so it looks to me there is active hacking attempts.
See Log file: Openscad_forum_NAML_Log_20171126_Hacks.txt
Anyway to check the IP of these or anything else to be done?