It would be useful if it were possible to ban IP ranges not just by netmask, but also by ASN number (as provided by asmap).

Suggested by @gmaxwell.