[pfyon]

Check your hackers table in the db, it contains the account name, charname, what command was detected, what zone it was done in and what time it occurred.

Won't give you their IP, but you can ban the account that way.