It's contained in an HTTP header. However, IP addresses are not suitable to uniquely identify a user - aside from the spoofing issue, anyone managed by DHCP and/or NAT won't have a unique and unvarying IP address.
Sometimes the only way things ever got fixed is because people became uncomfortable.
She still doesn't approve of my superhero lifestyle. Or this shameless plug:
free, earth-friendly heat - a kickstarter for putting coin in your pocket while saving the earth