In order;
IP = 60% (block)
E-mail = 30% (block or flag)
Username = 10% (allow unless one of the above is a match)
Given how simple it is for spammers to create for example, Gmail (cheers for making it super simple for them Google!), the IP MUST be given the most weight, with e-mail second most, and username the least.