User Registration

Hello @tripa5 and thanks for reaching out to us!

Are you using any sort of membership plugins or anything?

You might be able to check your Wordfence > Tools > Live Traffic page to see if you can find these IPs that might be hitting the site and creating these user accounts.

Oftentimes, these are bots that are spam targeting your registration. You might want to tighten up your rate-limiting settings as well.

I generally set my Rate Limiting Rules to these values to start with:

• If anyone’s requests exceed – 240 per minute
• If a crawler’s page views exceed – 120 per minute
• If a crawler’s pages not found (404s) exceed – 60 per minute
• If a human’s page views exceed – 120 per minute
• If a human’s pages not found (404s) exceed – 60 per minute
• How long is an IP address blocked when it breaks a rule – 30 minutes

I also always set the rule to Throttle instead of Block. Throttling is generally better than blocking because any good search engine understands what happened if it is mistakenly blocked and your site isn’t penalized because of it. Make sure and set your Rate Limiting Rules realistically and set the value for how long an IP is blocked to 30 minutes or so.

Let me know what you find!

Thanks again!

Those are just known pages that good bot crawlers will sometimes target. These ones you have listed are actually defaulted URLs from when you install Wordfence, I recommend leaving them here.

As for your user creation issue, you could try setting up Recaptcha in your Wordfence > Login Security > Settings. I recommend running it in test mode for a week to see if this helps. This will cancel all the bots that try to register on your site.

https://www.wordfence.com/help/login-security/#captcha-options

I hope this helps!

Thanks again!