Finally figured it out, 2-0
For about a week I was getting a stream of notifications about user accounts being created on my WordPress blog installation. It didn’t make any sense because I have registration disabled. I would check my user list and not see any of these user accounts which were being supposedly created which obviously were not legitimate users. I was paranoid and unsure of what was going on so I installed a security plug in on the blog to keep an eye on things. I finally realized yesterday what was happening.
I host my blog with GoDaddy. One of the options they have is to create a staging site where you can try out changes first in a test installation before doing them to your main site. I evidently created a staging site years ago but have not touched it. It was this site that the bots found and were creating bogus accounts on. I addressed the issue by simply deleting the staging site, end of problem.
Mexico won their knockout game last night in the World Cup, the first time they have done it in 40 years. Sure I am pulling for Team USA but Mexico is my number two based on my girlfriends rooting interest.