Well i get this wierd log everyday on my web server

pam_unix

sshd:
Authentication Failures:
root (x.x.x.x ): 237 Time(s)

SSHD Begins

Failed logins from these:
root/password from X.X.X.X: 237 Time(s)

Now i understand that someone is trying to exploit the buffer overflow exploit in SSHD, however i've got that patched. However this Login business is keeping me Nervy. Since the IP address changes everytime, i can't block it through IPTables.

I would like to block an IPAddress upon say 5 Unsuccesful Logins. Any ideas or any other suggestions would be very helpful.

Thanx in Advance

I don't know how to do that, but if you know the IP addresses of the computers which need to ssh into your computer, you could do what I did. Simply block everything, and allow just those select IP addresses. You'd use the /etc/hosts.allow, and hosts.deny files to do that.
I only allow computers from my University, and my parent's computer, since those are the only ones I need. I used to get those all the time, before I did this. Now I'll occasionally get one blocked login attempt every couple of days, usually from somewhere in East/Southeast Asia.