You may also want to look at possibly disabling XML-RPC to see if that resolves it. I believe you can also look at your user creation settings to prevent new user creation.