Actually, assuming that her member system is written in PHP, it would make more sense to integrate such tracking into the login system. $_SERVER['REMOTE_ADDR'] can be used. Of course, there's some measure of inaccuracy, and legitimate use may still result in differing IP addresses recorded over time.