I would imagine IP bans would be useful. Although the issue with this is that you run into the problem other websites are having: people who are valid users that are on VPNs get caught in the filter of IP bans because botnets also use the same VPNs.