"Knowing where people come from" does not imply ID'ing individual people, which is why I specifically mentioned that Mozilla technology. The legitimate interest is in aggregate data, and yes "lots of people come here from the brothel" is legitimate data. "This particular person did" is not: If you wear a suit and happen to come with the office crowd doesn't mean you're an office worker, you could be a travelling salesman.