log bad IPs

so that scripts can do something with that.