It's possible the bot is in another channel that sees the user. It's possible that the bot saw the user speak in another channel or privately (eg, CTCP Ping'd the bot?). It's possible that the bot performed a lookup on the user to acquire its address or nslookup to resolve his IP.
