Update: looks like it _will_ take a lot of time to bruteforce a single IP:

   >>> timeit.timeit('bcrypt.generate_password_hash("127.0.0.1")', "from app import bcrypt", number=10)
   3.342690944671631