[wplug] lousy european crackers

[Brandon Kuczenski]

Lately I've been getting numerous (i.e. >20) attempted logins from such
accounts as root, daemon, www, news, uucp, etc from the same IP address on
any given day (though the IP address changes from day to day).  Is anyone
aware of a configuration option for sshd that will freeze out a given IP
address after a specified number of failed logins?  Barring that, is there
another way to achieve the same effect?

FWIW, none of the non-user accounts, including root, are permitted to
login over ssh.

-Brandon