This is difficult really, on one hand if people have multiple active accounts (not just they forgot password and made a new one after months away or something) then I think they should be named and shamed but only in the cases where he is 100% sure, just having the same ip isn't enough, because...