I wonder if something like this would be helpful on signup requests:
https://scamalytics.com/ip/api/pricing