You will be able to lockout an IP and User account with defined limits. Account lockouts will be available in Settings > Authentication > Account Lockout Policy.

Client IP Lockout
This policy will block all logins from the client IP address. A failed attempt will be logged when the client submits an incorrect username, an incorrect password, or an incorrect one-time password (OTP) or if the client attempts to connect from an IP not allowed by Network Restrictions. A Site Administrator will still be able to access this app even if the IP is locked for other users A client that has been locked out by IP address will appear like the following:
