It seems that some (ab)users use their VPN to circumnavigate their bans.
I would like to suggest banning their network cards mac addresses.
This has to be implemented server-side, obviously.

and yes, it's not a fail save, but still, it would create more of an obstacle, not everyone knows how to spoof their address.