First, a tip of the hat to James3838 for solving the bluestell spamming problem.. Turns out there was an account with no password (created before I got here) that was the root cause. Once the account was disabled, the spamming stopped.
Course, now I'm absolutely paranoid, and I just found a...