As noted in the other posts, you don't want to block based on IP. One bad user behind a proxy (or NAT'd) shouldn't block all other users comming through the same proxy.

I do like the idea of a honeypot link though :)