Uber breach traced to IP address of Lyft CTO

'After Uber discovered the unauthorized download, it examined the Internet Protocol addresses of every visitor to the page during the time between when the key was posted and when the breach occurred'

lolwutf.

Can someone please tell me how Uber got the IP of 'every visitor to the page [on GitHub]'?

And, to that end, what even constitutes 'the page'? If someone cloned the repo, how is that tally'd?

This reeks of weirdness.