I started getting some spam messages that appear to be sent by my install of Expression Engine.

The only evidence I am seeing is some database entries in the table exp_email_tracker

There are not spam user accounts.

I'm confused about both how this could happen and where to start to fix it. Has anyone run into a similar issue?

Currently running EE 2.9.0. With the Snaptcha add on

  • my first step has been to upgrade to EE 2.11.3 and update all add ons to the latest EE 2 compatible version, I'm also installing an SSL cert
    – mjr
    Aug 2, 2016 at 14:40
  • What version of EE were you running previously? Have you seen any evidence of spam since upgrading?
    – Matthew
    Aug 3, 2016 at 3:21
  • previously EE 2.9.0 - no evidence of spam or any suspicious activity since upgrade - I also blocked the IP on my server's firewall
    – mjr
    Aug 3, 2016 at 13:50

1 Answer 1


Ultimately I found no evidence of a hacked EE install. Upgrading to the latest EE 2 in my case (2.11.3) seemed to fix the issue. I'll be sure to update if I find anything else.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.