For vanilla (the forum software we're using), there's an "activity" table. It's used for notifications. Weirdly enough, as a user you're also able to post directly to this table. This was exploited by bots. The simplest way to deal with it was simply to disable the table, but it does make other things not work (like notifications).
Comments