Potential site attack detected

[Juan Roman]

I have received a message via website contact form from Thwaites@gmail.com, offering substantial amount to advertise http://nroxy.com on my site, and this has raised some red flags.

It appears the same email address has been used to attack some websites in the past, so I just wanted to bring your attention to this and also ask if anyone might know more about this.

Thanks

[universal4]

I am not sure why an advertising offer would be considered a threat of attack, and email addresses are not usually associated with web site attacks.

I do see that particular email has been used in some spam runs possibly, but spam assaults and website attacks are not necessarily interchangeable.

The fact that it is a gmail account shows that the spam itself most likely did NOT come from the email account, although it might have been used in a joejob on others or it mail have been in the body of the email or listed as the false sender.

As an example a quick google of the email shows it blacklisted in a thread at cleantalk, but it was using an ip from colocrossing in NY but not coming from a google server.

This is another reason that email and web servers should always be on separate servers and ip space so that an assault on either service would not effect the other.

Rick
Univeral4

[Juan Roman]

I am not sure why an advertising offer would be considered a threat of attack, and email addresses are not usually associated with web site attacks.

I do see that particular email has been used in some spam runs possibly, but spam assaults and website attacks are not necessarily interchangeable.

The fact that it is a gmail account shows that the spam itself most likely did NOT come from the email account, although it might have been used in a joejob on others or it mail have been in the body of the email or listed as the false sender.

As an example a quick google of the email shows it blacklisted in a thread at cleantalk, but it was using an ip from colocrossing in NY but not coming from a google server.

This is another reason that email and web servers should always be on separate servers and ip space so that an assault on either service would not effect the other.

Rick
Univeral4

Hi Rick,

I guess characterising it as a potential attack was not the right thing to do, but I have little experience with these kinds of things, as you can see.

Thanks a lot for helping shed extra light on the matter. Ok, I will see what he has to say and take it from there.