2
For bad behaving users, I look up the IP with a DNS tool and then ban the net of it for Apache with .htaccess instructions.
Of course due to the localised sites I manage, I have no problems to cut off potential traffic from China, Russia and the East block or the US.