How about by GUID as well as IP. Both can be changed, but if you're an admin on several servers, deleting your GUID and getting a new one is a painstaking process, as you have to request admin all over again.
I agree, however, in that there is no completely effective method.
This only improves the chance that aimbotters will be caught.