If cookie ban has his advantages and ip ban has his, then combine it, do both.. There are no other ways to ban people but only specific ip/host ban, range ip ban, cookie ban.
But if you choose to use cookie ban, you will have to weight things together ...