[bradmca]

Is there something I can do as a result of seeing from the windows event viewer that someone has had 1000's and 1000's of failed attempts at logging into my FTP server or SQL Server?

e.g. a script of some sort that you can configure so that if a server has > x failed logins for a particular service then any connections from the source IP address are at least temporarily blocked.