If it’s a school or business it could be a malicious user at the same IP address. If it isn’t, IP addresses are often dynamically assigned to physical devices, so it’s possible that a different device from your user is issuing these requests.
Do they look malicious in nature and/or are they consuming a lot of resources?