You can limit the number of times a user can attempt to log into SAP system.You can define the number of unsuccessful logon attempts before the system does not allow any more logon attempts. You must set the parameter to be lower than the default value parameter of login/fails_to_user_lock. The default value is 3 and you can set the permissible values between 1 -99. Login to your SAP system. Execute transaction code RZ10, select Instance Profile and followed by Extended Maintenance. Find the below parameter to adjust or maintain the value.
login/fails_to_session_end