@nnipsx totally possible, but are you sure its actually being done by the user? typically user creation is a privileged action, so it might actually be created by system.