fail2ban

ignoreip works for dynamic DNS.