You don't have to keep IP addresses in the log. You could encrypt them with a key that is regenerated every week for example. This way you can identify requests

You don't have to keep IP addresses in the log. You could encrypt them with a key that is regenerated every week for example. This way you can identify requests from the same visitor over a week but you cannot restore their IP address. I think that soon there will be extensions for popular servers that implement something like this. I wish it were the default configuration. Also I think if IPSs rotated IP addresses among their customers daily it would not be a problem at all.