"Just blocking IP urls is like playing the cat and mouse game, malicious sites constantly change the IP urls, but their domain usually remains to be the same. Some malicious site will use hundreds or even thousands of different IP url's that all point to the same domain."
Thanks for info ,thats the thing i talking about before 5-8 days.
If you know their ip they are also know after see peerblock updates so i think it is better concept to block domain instead url.