it looks like some bots are very active, and have a small AI permitting to perform login requests.
Upon user request - I had reactivated user-account requests on my website.
It didn't take 1 Hour for 2 Account-requests to get through, obviously with wrong E-Mail addresses. I'll observe the overall behavior. If it get's overhelming, I'll disable Account-Creation again.