Many software distributions are deprecating tcp-wrapper which denyhosts depends on.

I've migrated to fail2ban which supports iptables and can monitor services other than ssh.