you can't block by ip
there are several ppl who use one ip
and work in different departments
what you should do is take
the machine name at the timestamp moment...
and match it with the nick name listed in your
database.... ip+machinename but, imagine you go to another location and you need to login, then the release has to be with login in again and some kind of login protection, like the imaging crypto... if someone got caught using the same ip + same machine name at the time stamp, then both nicks could be banned,,, or suspended...