A spammer got past Bad Behavior! What now?
Bad Behavior targets robots which leave spam on blogs, forums, and other PHP-based software. If a spambot was able to post successfully, please check the following first. Is Bad Behavior properly installed and enabled? I have received many reports of spammers getting past Bad Behavior, but upon investigation it turned out that Bad Behavior had been disabled or not installed properly. If the above did not solve your problem, then please turn on verbose logging, wait for the spammer to post once more, and then send me a trouble report. Include the Bad Behavior verbose log entries matching the spammer’s IP address, which you can obtain from phpMyAdmin. (Please do not send all the entries in the log! Search the bad_behavior table for the spambot’s IP address and export only those entries. Also, please do not send me the Apache logs; they do not include enough detail.) I can use this detailed information to analyze the spambot and block further attempts in the next release of Bad Behavior.