What about automatic unban after some time? This is easier and makes more sense as attackers IPs change after a while.