Ok stupid me, found it. But is it possible to ban precise IP ranges ? The wildcards are not so precise.
To ban the 172 network, enter 172.*.*.*
Banning ips is just a short term fix. Spammers change IPs faster then they change underwear. You can ban the entire network range and they will start using proxies.