To prevent DDoS, you'd have to know which IP and assume they wouldn't use that IP again...wishful thinking. But as another person said, banning the person/user would be great, but proving it was them, as you mentioned...isn't possible imo.