When I tried to log in to my blog this morning, I was blocked by the Bad Behavior plugin. To get into my website, I had to SSH into the host’s server and delete the Bad-Behavior directory from the wp-content/plugins directory in my WordPress installation. (Deleting a plugin’s files from the plugin directory is the usual method for dealing with misbehaving WordPress plugins.)
On the Bad Behavior blog is this post describing the problem:
All users should update to Bad Behavior 2.0.11 immediately to prevent being blocked from your own site.
Within the past two days users have found themselves blocked from their own sites while using recent versions of Bad Behavior. A third party blacklist which Bad Behavior queries recently began sending false positives for any IP address queried, causing everyone using Bad Behavior to be blocked. This issue is fixed in Bad Behavior 2.0.11.
I’ve installed 2.0.11 and all is well once again.