Denyhosts is an open source security application that is used to protect servers from brute-force attacks. It works by monitoring system logs for authentication attempts from known malicious hosts and blocking them from accessing the server. Denyhosts works by keeping a database of IP addresses that have been used for malicious activity such as attempting to log in using common usernames and passwords. Whenever an IP address is seen attempting to log in with an incorrect username or password, it is added to the database and will be blocked from accessing the server until it is removed from the database. Denyhosts can also be configured to send alerts to administrators in the event of a suspicious or malicious activity.
The discontinued software has been established open source and has been abandoned by the main developer. It looks like a very good detector but fails to stop attacks successfully. When I have it set to block IP addresses after 5 failed attempts, I should not see multiple entries showing 300 attempts with the same IP addresses.