Received an odd one today and did a search to find others having the same concern. There are some useful tips on how to
protect your admin login.
I had this problem in the past and could not figure out why anyone would want to set up a new user on a blog where registrations were disabled or rather hidden from everyone except the tech savvy.