[ParaZite]

Yes, feds love these plugins. Makes there job a whole lot easier.

Why not just allow for two factor authentication? Example: email confirmation if logging in from a different ip range.

Not 100% sure but I'm 95% sure that all our IP's are saved on the network server anyways.

Problem with your idea is that it isn't too difficult to get someones email address. It isn't about securing the account in any way, it's to allow users to see what IP's have been used to log into their accounts so if they suspect their account has been used without authorized permission they can easily check. It's also a good tool for administrators to use in the ACP for easier searches.