Is anybody else getting any of the following in their logs in drupal ?

verify-LAC_Compliance not found.
notified-LAC_Compliance not found.
verify-LAC_Compliance not found.

I have a whole bunch of these from the same IP 65.160.238.180

The IP address revealed the following

IP Whois Information For 65.160.238.180

-----------------------------------------------------------------
Sprint SPRINTLINK-2-BLKS (NET-65-160-0-0-1)
65.160.0.0 - 65.174.255.255
RAGING WIRE SPRINTLINK (NET-65-160-224-0-1)
65.160.224.0 - 65.160.239.255

# ARIN WHOIS database, last updated 2006-08-14 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
-----------------------------------------------------------------

I wouldn't usually worry but i've recently seem some strange login trys (including admin) that has me concerned.

Comments

cursor’s picture

Yes, I found a few when I was looking at the logs. There's a number of access attempts and page not found triggers from the same IP 65.160.238.180.

My best guess is it's some kind of spyware scanner/scraper or spammer bot. A google lookup shows this IP coming up a number of times in many website log files. I would also like to know more details. Or maybe we just block the IP and get it over with.

desm0n’s picture

Mine seems to have given up now.
--
http://www.porttalbotchat.co.uk
-------------------------------------------------
Our mission is to discuss issues and topics of residents of Port Talbot. We provide info on events, issues, concerns and discussions of our local area.

cursor’s picture

It's a comment spam-bot and it usually can't post anything if your site is to approve comments before posting. Anyways even the Bad behaviour plugin is blocking it as well.