I would recommend against manually adding IPs to the blacklist. Hackers use temporarily assigned IPs or hacked computers belonging to legitimate users on commercial ISPs. This means that after a while (hours to days) the IP that attacked you will be reassigned to a legitimate user. By permanently blocking the IP you will be denying access to legitimate visitors.
The best thing you can and should do is let Admin Tools temporarily and automatically ban IP addresses that attack you. This automatic banning follows the settings you can define in Components, Admin Tools, Web Application Firewall, Configure WAF, Auto-ban Repeat Offenders.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!