It wouldn't be hard to ban all users who've logged in from the one IP.