I implemented IP bans. They can automatically expire and the expiration comes into effect when the affected person tries to connect. For IPv4 you can do wildcards if you want to ban a range; IPv6 shouldn't break anything but my VPS doesn't even have access to it.
Hopefully I never even have to use any of this. :p