Disable unverified users to create topic

Yes, I deactivated that account after I saw that account created one spam topic, nginx’s access.log didn’t show any new topic activity either from this user. I’m really confused how this guy creating new topic without using web interface, there should be some other way to create topic other then the web interface, thats why asking help here.