Hi Nicholas,
I created a unique email address for receiving notifications from the firewall: in the cases of security exceptions, IP blocking, and backend login. I don't use this address for anything else. I don't send email, only receive from the websites.
Today I got span mail sent to this address! Could it be that one of my Joomla installations has been hacked? Or was the traffic from my email provider somehow compromised? How do you see this? Any plausible explanation? How should I proceed?
Thanks.