the way i deal with them is to find them in the user data find out when they were given access than I IP ban the account for good