For the blocked user and attack emails it would be nice to have more flexibility.

For example allowing multiple users, or a role, or even just entering of email addresses.