I quite agree with you that it would be highly unpractical to set up that kind of system around access logs. For that reason, the sensible thing to do is to no

I quite agree with you that it would be highly unpractical to set up that kind of system around access logs. For that reason, the sensible thing to do is to not have IP addresses in your access log.