IP ban can create collateral damage. With mobile devices, many people would have the same IP address at or near the same spot at any given time, therefore many people could be banned too. Especially public wifi…
could you do device hardware identifiers or we getting to advanced/overkill in implementing effectivily? maybe some tool thats not used untill you can see the same multiple accounts linked to the same few devices and just ban those accounts or shadow ban them??