Currently we allow multiple connections from the same IP because we only enforce uniqueness via the ID.

We shouldn't allow more than one connection from the same IP. Perhaps we should even limit the number of connections from an IP block (we used to do this).