Autoblock ip on bruteforce attack on root (linux)

I recently noticed that I have many login attempts, over 2 million and counting. This is, of course, a brute force attack.

How can I automatically block ip for 15 minutes when root ssh access fails?

I do not need a firewall; just a small option to activate this security feature.

What are you offering?