Yes you can. Under settings for each campaign go to 'IP exclusions' at the bottom of the screen.
Google will keep showing the ad but if someone keeps clicking it fraudulently Google will most likely not charge you for the clicks or refund you at the end of the month for 'invalid clicks'.