Repository access violation

I have created private repository. Even though commits found from the users which is not in the group or team of repository. How its possible ? what should be done to prevent access and commit from the user which is not in the team or users of repository ?