In addition to what @JammyDodger said, in a standard install you would provide the nginx logs, that contain the IP address of every request that reached your server and can easily be correlated to both the request that made the reply, and to the specific ISP customer that pays for the internet connection. Provided that the request isn’t old enough to have been rotated out of the logs.
6 Likes