Yes, the IP can be used to identify people. If you want to track users using their IP and respect GDPR, you need to get their consent first.

The best is to not store them before you get consent. Having a temporary access log with a few IPs is probably fine. But keeping all your access logs forever for analytics purposes is not fine anymore.