sshit is a Perl script that blocks IP addresses generating too many failed login attempts within a specified time Take a look at an example of auth.log when sshit is being used. The latest version is 0.5. Download sshit-0.5.tar.gz The script sshit v0.5 -- The manual is in here sshit.conf Next version is 0.6 (still testing) Download sshit-0.6.tar.gz sshit v0.6 sshit.conf