It could be done without IP logs

could be, doesn't, servers, session, user