Denyhosts version 3.0: Every time an IP address appears in a log file, Denyhosts opens the hosts.deny file and reads the whole thing to match the address. Every time. Nothing is cached in memory. If you have a huge hosts.deny file and are on the open Internet, Denyhosts becomes a CPU hog reading and re-reading that file for every IP address that appears. Not usable.