they just register and don’t verify the email, all of them seem to come from this IP 148.72.246.29, I already set these security rules but it doesn’t seem to help
Given the rate is very low, it won’t be caught by Attack Protection mechanisms like Suspicious IP Throttling. If the IP is fixed, one option is to check the IP in a Pre User Registration Action and deny the signup. More info here: Pre User Registration Flow
thanks for the help, I’ll try this