Ip banning for new accounts together with creation time exceptions seems pretty good thought: almost all existing users would be unaffected. Only costs you growth untill you find some extras to put into the account creation process.