IP from his Internet provider.
Some ISPs provide dynamic or rotating addresses, which could have resulted in a collision.
I would like to hear of a better solution to the evil score problem - how else do you ban mass waves of rule-breakers when they sign up? I would actually argue that the evil score system is incredibly generous as users can pay for those specific accounts to be unblocked and for the evil to be removed - typical permabans for IPs aren't usually that friendly.