If you're using ASP then I think a user's IP is available through the session object, or it's an environmental variable or something. Been a while since I did ASP now.

Your friend might have a dynamically allocated IP though, which would mean that his IP is different each time he logs on. You'd have to find out his IP each time.