Ask HN: How to implement abuse protection without storing IP addresses?

I am working on a website/app where I would prefer not storing user IP addresses for privacy purposes. Is there a way to achieve abuse protection without IP addresses?