[Defender] Block all IPs not on whitelist

I came into the office today to find that there have been quite a few attempts to brute-force my website over the weekend, and they've been using the real usernames and variations of them. Because I know who should and should not be accessing this website, and everyone who should be accessing it can get ahold of me, I would love a feature where only whitelisted IPs have access.