> Why do you assume that the IP that sent the messages was recorded.

Seriously? It's not an assumption.