On Sunday, March 13, 2005, 7:31:01 AM, Raymond Dijkxhoorn wrote:
I'm not asking for trap data. I'm asking to look for XBL hits, then take the URIs from messages that hit XBL. In other words I want to get the sites that are being advertised through exploited hosts.
Nothing to do with traps or SBL. ;-)
If you can get a feed, why limit this to hosts found inside XBL?
This is not for a spam feed specifically. It's to get data about what sites are spam advertised through compromised hosts. XBL happens to be a good, reliable list of compromised hosts. Other lists like list.dsbl.org may be ok too, but those are the only two RBLs I have a lot of confidence in. The goal would not be to get all data but to get all reliable data.
Jeff C.