Implement hook_boot() and check the phpids_log table whether thresholds for host were reached.
Block with custom message conditionally.
Keep everything as speedy as possible, don't mess with anything that makes core instable.