A bad event request records a spam event in GBUdb for a specific IP. If the IP record does not yet exist then the record is created before the bad event is recorded. This mechanism allows systems to train the GBUdb about IP sources when messages from that source might not be scanned in the normal way -- such as when they are black-listed by another filtering component.

<snf><xci><gbudb><bad ip='12.34.56.78'/></gbudb></xci></snf>

The <bad/> element indicates that this is a bad event request.

The ip='12.34.56.78' indicates that the event should be recorded for the IP 12.34.56.78.