Are you using a proxy by any chance? If so their client IP would be different from their real IP if you have their real IP ban that instead and that'll block them from joining the client alternatively if you're using PlusEMU you can Machine Account and IP the user in one swoop.