Index: server/fedora/config/etc/syslog-ng/d_zroot.pl
===================================================================
--- server/fedora/config/etc/syslog-ng/d_zroot.pl	(revision 887)
+++ server/fedora/config/etc/syslog-ng/d_zroot.pl	(revision 888)
@@ -67,4 +67,5 @@
     map { s/^(.*?): // } @message;
     %toclass = ();
+    my %ips = ();
     foreach my $message (@message) {
 	sub sendmsg ($;$) {
@@ -86,4 +87,9 @@
 	    } else {
 		sendmsg($message." (UNKNOWN KEY)");
+	    }
+	} elsif ($message =~ m|^Failed keyboard-interactive/pam for root from ([^ ]*)| {
+	    my $count = ++$ips{$1};
+	    if ($count % 10 == 0 or $1 =~ /^18\./) {
+	    	sendmsg($message." (repeated $count times)", "scripts-spew");
 	    }
 	} elsif ($message =~ m|^Out of memory:|) {
