Add these to your denyhosts.cfg file for Mac OS X (v10.4 and greater): SSHD_FORMAT_REGEX=.* \[Sender sshd\] \[PID \d*\] \[Message .* PAM: (?P.*?)\].*? SECURE_LOG=/private/var/log/asl.log