To answer my own question: blocking IPs is going to be difficult. Gab uses Cloudflare, so you can't get it directly from DNS. Can watch for incoming requests of data, but preventing Gab instances from seeing your stuff won't be trivial. Be really nice if Suspending an instance would prevent API calls. Now wondering if Pleroma will do it.