Subdomain users can login on any domain

I got a multisite where for some reason users of domain x.domain.com can login on y.domain.com. Though, there are not registered users for y.domain.com.

Would there be a settings that I'm unaware of?