Better way for IP Restrictions to OnPrem Instance

Currently when setting up Allowed list for Logon page this does not stop random attempts for logins. These attempts do not appear to be coming from the default page but more of a scripted API type attempt. Need a way to restrict these types of attempts as well to follow the same Allowed List for logins.