A WordPress plugin will still allow someone to access your images and hotlink to your resources The fastest and most reliable and secure way to block an IP is in your .htaccess file. Let me know if you need help on doing that.
From my experience, wp-ban plugin also blocks other IPs. So, use it with caution. I block IPs via my cPanel or using .htaccess