Use full time stamps and check ip addresses only for the last 2 hours.