Looks like #DenyHosts has resumed development. I’ve switched to #Fail2Ban, but I liked DH config file syntax better. https://github.com/denyhosts/denyhosts

It looks like the current git version also works without TCP-Wrappers ... it can directly work with Linux iptables or BSD pf firewalls.