You will be able to lockout an IP and User account with defined limits. Account lockouts will be available in Settings > Authentication > Account Lockout Policy.
Client IP Lockout
This policy will block all logins from the client IP address. A failed attempt will be logged when the client submits an incorrect username, an incorrect password, or an incorrect one-time password (OTP) or if the client attempts to connect from an IP not allowed by Network Restrictions. A Site Administrator will still be able to access this app even if the IP is locked for other users A client that has been locked out by IP address will appear like the following:
User Account Lockout
This policy will block all logins for the specific username. A failed attempt is when the client submits an incorrect password, or an incorrect one-time password (OTP) or if the client attempts to connect from an IP not allowed by Network Restrictions. This policy is applied after any Client IP Lockout has been checked and after the user has submitted a valid username.
A client that has been locked out by Username will appear like the following:
If both User Account and IP lockouts are active an IP address and Username will be listed. Removing one will remove the other.