Many people "test" the cheats before they use them actively. Termi was playing under the name "Penis" when he first started using the cheat. If the ban was automated and immediate, it would ban on a name nobody knew or cared about. By waiting a bit and manually reviewing the data, I was able to determine exactly who it was and ban a relatively well known player.