custom policy brute force attack asm

hello I have problems thinking about how to make a restriction for the search of a value, in a form I have a field called account number and a search button, you want to limit that search to only 3 attempts, think of the brute force policy attack but there is a login, ie a username and password and depending on that applies the policies, in my case I do not want a login because I have only one parameter, when I make 3 attempts to block the page for 60 min or something Like the brute force attack policy, could you guide me how can I do that?