Yesterday and today multiple user accounts were created on this instance and instantly marked as bots, just sitting there and doing nothing (at first sight at least). It is unknown what their purpose is.
We investigated these accounts and found out that every account has been opened by the same IP-subnet linked to a company from the Seychelles.
We are going to block this IP-range and publish the range to be transparent in our actions.
The safety of our users is very important to us.