monline

"Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log and bans IP that makes too many password failures. It updates firewall rules to reject the IP address."
There's a nice Debian howto here for a basic setup of Fail2ban to protect the SSH daemon from brute-force login attempts.