stopping brute for ssh attack

Is there a way to do the following?

I keep getting brute force attacked on my ssh every night by one or two IP
addresses,

I think I have my sshd_config locked down.

What I would like is if an ip address tries to do 3 or N unsuccessful
attempts to log in that ip address is cut off and ignored, from then on.

This would stop most brute force scans

Is there a way to do this?
Received on Tue Feb 7 20:58:25 2006