There was a security flaw in the reflect snippet code (which you can see is now gone). Bots are still looking for it, however.
Putting this near the top of your .htaccess file (but below the RewriteEngine and Rewrite Base lines) will block most of them:
#first, block bad bots
RewriteCond %{HTTP_USER_AGENT} libwww-perl.*
RewriteRule .* - [F,L]
RewriteCond %{QUERY_STRING} snippet\.reflect\.php [NC,OR]
RewriteCond %{QUERY_STRING} reflect_base [NC,OR]
RewriteCond %{QUERY_STRING} (.*)(http|https|ftp):\/\/(.*) [NC]
RewriteCond %{HTTP_USER_AGENT} ^libwww-perl [NC]
RewriteRule .* - [F,L]
You’ll also get some traffic now from bots and spiders following the link in your message, so you might want to alter or remove it.
