Yeah, very weird! If users need to make accounts and you have many many accounts then you can’t restrict account creation. You would do that in settings, but that’s not a possibility for you. I do not have a good solution but would be talking to whoever is responsible for web server security to look for logs around the time the user was created as a starting point.