I have a small business that provides an online service, like a CRM service for businesses.
Over the last few weeks, I've had 20 - 30 random accounts created. (this is unusual as I might get one or 2 a month).
They would create an account, then add a few random clients and do a few other bits. I will then disable the account to stop it logging in.
I added a recaptcha to the site for signing up, but still, the accounts get created every day.
I'm logging the IP address when the account is created and the IP source is from two different countries (does not change that often, but always the same state).
Any ideas about what's going on? How I should handle this situation?