It depends on the purpose / if you have a legitimate need to store them. Are you storing IP's for a certain time, so you can discover and investigate attacks?

It depends on the purpose / if you have a legitimate need to store them. Are you storing IP's for a certain time, so you can discover and investigate attacks? > include preventing unauthorised access to electronic communications networks and malicious code distribution and stopping ‘denial of service’ attacks and damage to computer and electronic communication systems. Are you storing IP's for a certain time, so you can run analytics? > Further processing for [...] statistical purposes should be considered to be compatible lawful processing operations. Are you doing direct marketing to your customers? > The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest. [Legitimate interest] There is a relevant and appropriate relationship between the data subject and the controller [...], such as where the data subject is a client or in the service of the controller. If you are not big enough to have a law department look at this, you don't need to worry so much about a weblog.