Random gmail accounts are registering into my app every hour

they just register and don’t verify the email, all of them seem to come from this IP, I already set these security rules but it doesn’t seem to help

Given the rate is very low, it won’t be caught by Attack Protection mechanisms like Suspicious IP Throttling. If the IP is fixed, one option is to check the IP in a Pre User Registration Action and deny the signup. More info here: Pre User Registration Flow

thanks for the help, I’ll try this