how do bots seek forums, blogs and other "spammable" websites?
It appears that every forum, wordpress blog and other such website is regularly visited by bots, who use it to post shady advertisements.
I am curious how do bots seek such websites?
I understand - correct me if I'm wrong - that once a bot has found a website it runs some simplistic checks to see whether it is powered by software such as wordpress, phpbb etc. While this can be obfuscated, most often it is not and therefore checks such as requests to /wp-admin.php are sufficient.
And once the bot establishes it is on such a website it starts spamming it.
But how do the bots seek websites in the first place? I don't think they just enumerate all possible http addresses? http://aaaa.com, http://aaaa.org, http://aaab.com, ..., ... -- this isn't going to work, is it?
Are there some sorts of lists that enumerate all publicly reachable websites?
