Bad Behavior seems to work fine for me, but I'm just wanting to gain a greater amount of insight and understanding about something I see in my log files from the plugin.
Can anyone tell me why there are certain blog posts that keep coming up as an area of interest for ip's using proxies? For example, this is what I'll see in my log files repeatedly, and from a variety of ip's, for the same blog post:
GET /2009/11/23/the-name-of-the-blog-post-is-here/ HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC Referer: http://www.myurlishere.com/2009/11/23/the-name-of-the-blog-post-is-here/ Host: www.myurlishere.com Proxy-Connection: Keep-Alive Cookie:
So, my question again is why are there so many ip's that show up going after the same blog post? When it occurs I check the blog post to make sure there isn't anything suspicious there to attract them. Maybe I'm being too paranoid, I dunno. Just trying to understand why this occurs.
Forgot to mention, many of them show in the log file from Bad Behavior as proxy connections:
Prohibited header 'Proxy-Connection' present