How odd that this should come up this week; someone's been reading my mail.
I just found the Samhain site last week, while on a business trip, and installed their last
(hosts.allow/sshblock.sh) setup on several Linux boxen I'm responsible for.
Works quite nicely.