at roughly 100 ip's a day, it would takes years to block them, unless you're doing cidr ranges anyway, work for a webhosting company, we come across this often. IP.board has decent internal spam controls that look for post flooding/login attempt fails/email harvesting and auto-blocks them. You may also want to put in some sort of Captcha to help block the new spam registrations.