if suspected and the log is still there.MAC is in NIC (network inetrface card).the only way one can track the person is by the defalut sever it connect (there are sevaral more).But you can play pingpong with two browsers with the same IP.
Admin can trace it.