The plugin Limit Attempts allows you to limit rate of login attempts by the ip, and create whitelist and blacklist.