Support

Bad Behaviour messages are created by our integration with the third-party Bad Behavior site protection library. Follow the link for more information about what it does.

IMHO, BB is usually very trigger-finger-happy, blocking a lot of legitimate requests. If you get a ton of false positives you can consider disabling it. Disabling it is easy: go to Components, Admin Tools, Web Application Firewall, Configure WAF and uncheck the Bad Behaviour integration checkbox towards the bottom of the page.

Bad Behavior is the integration of the third party Bad Behavior security library. It is supposed to protect your site by analyzing the request and figuring out if there's something suspicious about it. Following that link will tell you more about Bad Behavior and how it works.

Regarding the various sub-errors reported by Bad Behavior, there is an easy way to learn more about them. Go to your site's back-end, Components, Admin Tools, Web Application Firewall, Security Exceptions Log. Find the record of the security exception you are interested in (tip: you can select "Bad Behaviour" from the "Reason" drop-down to filter only Bad Behaviour security exceptions). There will be an info icon next to "Bad Behaviour". Click on it to visit a page in Bad Behavior's website which further explains the details of that security exception.

Disabling the Bad Behaviour integration does turn off the HTTP:BL integration (it's part of Bad Behavior), but does not affect emails for other security exceptions.