A couple options MD could use in their controller if too many people have an issue, would be to regex off the last IP section before hashing, and enable -loose mode. Then only big IP swings would trigger rechallenges. They might also try a fingerprint instead of IP. As a last resort they can...