Bad Behavior

logo-ghostIf you tried to comment here and got a weird message about “Your Internet Protocol address is listed on a blacklist of addresses involved in malicious or illegal activity,” please disregard the message.

We were using a plug-in called “Bad Behavior” which was supposed to protect us from spam bots and the like. Well, apparently the plug-in was compromised and started living up to it’s name by sending that message whenever any management functions were invoked, including comments and even posting blogs or managing the links list.

Quite frustrating until I found out what was causing it. The plug-in has been removed and all should be OK now. We also upgraded to the latest WordPress version.

Thanks for your patience and understanding.

Update: John A. reported more about the problem on Steve McIntyre’s Climate Report Blog:

All users should update to Bad Behavior 2.0.11 immediately to prevent being blocked from your own site.

Within the past two days users have found themselves blocked from their own sites while using recent versions of Bad Behavior. A third party blacklist which Bad Behavior queries recently began sending false positives for any IP address queried, causing everyone using Bad Behavior to be blocked. This issue is fixed in Bad Behavior 2.0.11.

Share