There's also legal precedent that IPs can be sufficient enough to identify a person.