Where are spam registrations coming from?

I have my signups disabled on my Multisite network under:

http://clickwp.com/wp-admin/network/settings.php
http://clickwp.com/wp-admin/network/admin.php?page=ws-plugin–s2member-mms-ops (Membership only, not blogs)

I can see that WordPress registration is disabled: http://clickwp.com/wp-login.php?action=register

The only place you can register on my site are

1. Paid membership signup forms
2. http://clickwp.com/site-info/
3. http://clickwp.com/wp-clickstart/required-info/

Forms #2 and #3 are Gravity Forms with user registrations. I’m not getting any paid membership signups, or submissions to the Gravity Forms, but I am getting spam users approximately at a rate of 1-2 every week.

New User Registration on ClickWP:

User ID: 115
Username: ekokuwayayev
Email: ogftgffae@gmail.com
IP Address: 91.207.5.206

Any ideas? Thanks

Have you tried adding the captcha to your forms to see if that makes a difference? That’s where I would start. Other than that, I’m not sure how they could be registering.

Dave