No offense to everyone, but I'm kind of surprised no one mentioned 
pam_abl, which brings Automatic Black-Listing to PAM (which OpenSSH 
supports):

http://www.hexten.net/pam_abl/

  That is, assuming you care to use PAM.

      Jima