Don't ask me how I know, but... *cough*
Banning IP addresses was only one of their tactics. They would also block people by restricting processing of payment methods based on the billing address(es) of the customer they wanted to ban. So anyone who had a credit/debit card with that customer's billing address could…