I would have just banned the IP address for the 2 months, instead of just an account. One of the banned is already back playing again before the pixels had even settled on the OP's post. Far as I can tell, the only people who would be worried about it, are those that don't exploit in the first place. I'm glad you did something, now hopefully it get's enforced.