What could they do though? I thought courts in the USA ruled that an IP address can't be used to identify a person. It seems like the most they could do is ban the account, which they can do for any reason they want.
(I'm from Europe, asking out of curiosity.)
It's not enough to be used as evidence in court.
Most likely did the majority of the bots use proxies and VPNs, which may or may not provide additional information about their customers, but even then it has to be proven that is was the same user that did the acts which is very difficult.