I tend to use an escalation system.  If you look at the IP in question - it had been blocked only twice before (mine is the third) - compare that with the last IP in the list and you will see more blocks and the escalation from hours to days to a month. From my perspective the first IP will get a longer block if it comes back again to vandalise - to say 1 month or 3 months etc. talk