Sounds like a flood control for community creation would be appropriate.
It used to be in the early days instances would vet users at signup. Is there no mechanism for an instance admin to do the same for the creation of a community? They just can't be vetted before creation?
The process that's being executed to run the burner would be a clue, based on my experiences (limited) and knowledge (also limited). For windows, if the outright windows burner was used then there'd be system logs for that. If another program were used, well, that begs more IT security questions about permissions.
I have whole months of experience using Linux, so, no idea there.