Apparently they track it by downloads. My previous employer (a 25k employee healthcare system) had IP addresses in their logs a dozen times. Rather than telling Oracle to go f&*$ themselves (or at least pointing out that the organization has guest networks used by thousands of people), they rolled over and paid the $40,000 invoice—and threatened to take away the ability for their in-house software developers to download their own software.