My IP must be caught in some range ban, since I can't access the site without a proxy (Opera Turbo, to be exact. It isn't a proxy, but it kind of is, since it gives me a new IP).
The bots are most likely resolving the new IP from the domain, so I don't think changing the IP would make that big of a difference.
You could try disabling the domain temporarily and email all users with a new IP that they can access the forum with.
It's possible the person behind the attack could have created an account though, so it would be more secure if you could only e-mail users who registered, say, 4 weeks ago (long before the attack started). But I don't think that's possible in mybb without a little database searching.
Anyway, good luck fighting the attack.