Automatically block the last used IP address, and any subsequent IP addresses they try to login from.