> I need something that will see a failed attempt to authenticate, and block the address for a long period of time. Sounds like something snort can do.