That's what the Mask input is for. The simplest way to use it is to give a bit range. For instance, 123.123.123.123 with Mask set to 16 will ban 123.123... 8 will ban 123.123.123.*, and values in between will be differently sized subnets between the two.