I was watching the access logs in IIS when i noticed that some bots are browsing pages like this:
/Blog/EditPost.aspx?mid=14&pageid=1
Mozilla/5.0 (compatible; MJ12bot/v1.4.5; http://www.majestic12.co.uk/bot.php?+)
69.30.198.202
or like
/Secure/Login.aspx?returnurl=/Blog/EditPost.aspx?mid=14&pageid=1
Now, this seems a legit bot, not one that's searching for exploits (i see dozens of them searching for Wordpress exploits, for example)
How the bots can find the edit post URL?