I can ban its IP, but it will just come back with a new one. The only way to stop them is to implement more measures to keep them from registering. I might turn on admin account activation, although I'd rather find a less time consuming way if possible.