There are certainly ways to restrict logins to specific ranges of IPs, that would pretty much snuff out TOR and most IP spoofing.
While IP spoofing or using a VPN may prevent the ISP from seeing what you are doing, it doesn't prevent the VPN from seeing what you are doing. You have to be...