I dont think this would work too well. The users who are infected
often think something is wrong because their connection and computer
are not working quite right. So they disconnect / reconnect / reboot
so they burn through quite a few dynamic IP addresses along the way.
This is an artifact of ISPīs wanting to have static IPīs as an add-on
so they provide short lease times and change IP as often as itīs
interrupting service unneccessarily.