What he's probaby doing is using HTTP proxy's to mask his IP, which is very easy to do. The only think you can do it block these proxys as he tries to use them? Unfortunatley thats all that can be done.
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.