AdminCP->Vbulletin Options->Vbulletin Options->User Banning Options -> Banned IP Addresses.
But Banning IP's in a world of dynamic IP's is pretty useless.
is it worth the hassle? i have a lot of "google spiders" and other "crawalers" trying to create events all the time, messing with the calendar, even in areas reserved for admins