That does sound pretty interesting, though I'm not sure if the enterprise folk would pay for it.

I know on my personal hosts I tend to grep the access logs for requests to /wp-admin, /phpmyadmin, and blacklist IPs that make request to them. I should probably just switch to using fail2ban to do the processing, but I like the notices posted to my internal xmpp server.