Just to illustrate further, it's really easy to see if an IPv4 address was *ever* part of the network, e.g. look up current moria1's address: http://ts.mkj.lt:5555/details?search=128.31.0.34

So if a bridge was a relay once (under the same ip addr), implementing an additional check in GFW or wherever would make sense and might be feasible.