Built-in Addons:

Login Limit

This addon is useful to combat brute force login attacks by limiting number of attempt for each IP in a period of time.

Some of the Login Limit settings
Some of the Login Limit settings

This addon uses both temporary and permanent ban, and first uses temporary ban and if the attacks continue after that, IP is banned permanently.