The interesting part is that I actually love the counter-abuse measures built in discourse and don’t want to lose them but I believe that’s possible without knowing the exact IP address. Maybe we can redact the last two bytes of the IP, or maybe we can replace it with a unique hash.
It might sound too much to ask, but it would be fantastic if someone who’s already familiar with the code base can point out which parts of the program IP addresses are being logged.