thank you for confirmation.
I track IP at login and if an user fails login credentials for 3 times then I insert his IP in blacklist.
Every IP blacklisted is not more allowed to login.
With dynamic IP I think I will see much more IPs in monitoring's logs and it will be impossible to blacklist dangerous users. However I can always block them due to wrong credentials.
Sincerely