Please introduce new variable:
UPLOAD_DENY_THRESHOLD
which can be smaller than DENY_THRESHOLD_* values, so central server will allow for detecting cordinated ssh atacks.
So with
UPLOAD_DENY_THRESHOLD=1
even single invalid login will be sent to central database. If central database will recive i.e. X=5 such uploads it will be added for downloading by other peoples which setup theirs DOWNLOAD_THREASHOLD above X.
Logged In: NO
Oh, forgot to login, it was me Witold Baryluk, baryluk // smp.if.uj.edu.pl
Logged In: NO
Mayby also add UPLOAD_DENY_DELAY or UPLOAD_DENY_REVOKE for delaying or canceling uploading (in second case server will provide big random number which will authenticate this and will be stored locally by denyhosts) which was triggered by this mechanism.
Logged In: NO
Revoking will be triggered i.e. when second try will be sucessfull.