Make it so only one entry per IP address? The script would very quickly run out, assuming they couldn't spoof (not sure how easy it is to spoof IP addresses).