I agree that the prevalence of dynamically allocated IP addresses makes banning by IP address undesirable (though in principle it should often be possible to determine whether an IP address is statically or dynamically allocated.

If this turns out a be a serious problem, one idea would be to only allow logged-in users to make changes (except in the Sandbox).

M Carling