How to lock out IP addresses after too many authentication failures?
django-rest-framework
Solution
Not out of the box, no. You'd need to subclass one of the authentication classes and implement that behavior yourself in a custom auth class.
Problem
Is there a stock way to lock out IP addresses after too many authentication failures? I don't see how the built-in throttling would accomplish this, because throttling only kicks in after authentication and permissions succeed.