# Spam from "system"

**URL:** https://meta.discourse.org/t/spam-from-system/386364
**Category:** Bug
**Tags:** spam
**Created:** [October 21, 2025, 8:05pm UTC](https://meta.discourse.org/t/spam-from-system/386364 "2025-10-21T20:05:06Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![Mark\_W\_Bennett](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mark_w_bennett/32/130717_2.png) [@Mark\_W\_Bennett](https://meta.discourse.org/u/Mark_W_Bennett)
#### Post date: [October 21, 2025, 8:05pm UTC](https://meta.discourse.org/t/spam-from-system/386364/1 "2025-10-21T20:05:06Z")

</div>

On our Discourse instance, the “system” account has started sending spam to the forum and the email list. It has happened three times in the last five days.

There is no user responsible for “system,” nobody has logged in to admin with that username, and there are no obvious attack surfaces in the admin panel.

My best guess is that someone is exploiting the discourse server. So I came here figuring someone would have seen this before, but I’m at a loss.

Any thoughts?

---

_[View the full topic](https://meta.discourse.org/t/spam-from-system/386364)._