I work with a lot of student accounts and have seen recently an increase in students claiming the groupwise account has been hacked and someone else (in the school system) is logging into GroupWise and sending e-mail in their name. Is there a good way to find out what IP/Hostname a specific account has had log into it?

In addition is it possible to find out what IP address an e-mail has been sent from when the two accounts involved are on the same PO or at least same domain within GroupWise?