Personally I think that banning an IP instead of the User ID is a bad idea. Most people don't have a static IP and get a new one every 24h (or less, depending on their router settings). So you could end up punishing the wrong people (don't know about the actual odds of it happening).