Oh, how awful! Maybe it would be safer to initially block ALL IP addresses, and then selectively enable only those belonging to trusted freepers. You can have them provide their IP address in the Paypal transaction comments, or with the check.
Catch any good fish lately?