2 ms·

Because he might be a user too. And are you blocking all Web traffic except from people who your users, somehow? If not, then everyone is your user.