IPs can be so easily faked that they are of no relevance when trying to prove whether an account has been compromised. A Bitcoin address and signed message are near impossible to fake (unless the keys are sold/stolen), which is why they are used primarily to prove a previous owner is the same as the current.