You can argue you need that info for the operation of your site, but it's been established that you would still need to ask permission in that case, did you do

You can argue you need that info for the operation of your site, but it's been established that you would still need to ask permission in that case, did you do that? Where and how was that established? There are obvious operational and security reasons why the operator of a website might reasonably log access information, and there are lawful bases for processing data under the GDPR other than having the subject's explicit consent.