denyhosts, fail2ban, or something else?

[Aleksandr Miroslav]

Finally got sick of seeing tons of ssh break-in attempts in my logs. Am
considering using denyhosts, or fail2ban. Anyone have any experience
with these?

I'm already using the AllowUsers facility of ssh to only allow specific
users in, so I'm not overly concerned about the attempts.

This is for a FreeBSD 8.x box running pf, btw.

Thanks