i've been reminded that my original pam_recent module couldn't support ipv6 because iptables' recent module didn't do so. nowadays that is no longer true, and i've just updated the module to version 1.11 which plays nice with ipv4, ipv6 and dual-stack setups.

here is the original post about pam_recent for context; the newest version (with documentation) is here.