ds for every PASS command.  Alternatively, to add a delay <i>only
on failed logins</i>, you might use:
<pre>
  DelayOnEvent FailedLogin 5s
</pre>
which adds a delay of 5 seconds after the login has failed.  <b>Note</b>
that using <code>DelayOnEvent FailedLogin</code> for SFTP connections may
not work as you expect, as every password or key <i>attempted</i> by an SFTP
client that fails will trigger the delay -- and many SFTP clients will try
multiple different keys before using the correct/expected key, maki