Tambien tenia este mail:
PM Flood Control Patch for Invision Power Board 2.3.6 Released
We have received numerous reports from clients regarding spamming on the Personal Message (PM) system in IP.Board 2.3.6 and below. After consulting with reCaptcha (the provider of the captcha system in 2.3.6) we believe that humans are being used to bypass the captcha and then the newly created account is given to an automated script which sends PMs in huge quantities to your members.
The patch we have released today introduces a flood control setting to the PM system in IP.Board 2.3.6. This will limit how fast a member can send PMs thereby giving you and your moderators time to ban the offending account.
The download of 2.3.6 in the client area has been updated with this patch. If you already have 2.3.6 installed, you can download the patch along with instructions in the news announcement on the company forums. Applying the patch is quite easy but if you have questions feel free to contact support.
He investigado un poco y en frozen en una noche se habian enviado 27000 mensajes privados cada uno con su mail correspondiente. Como los correos salen mas despacio he podido borrar 21739 mail antes de que se enviasen y he borrado todos los privados directamente desde la base de datos.
Hasta que instale el parche el sistema de privados estara desactivado para los usuarios que no pertenecen a ningun grupo (Hentais).