Nice little visual basic script that creates a sink to monitor failed RDP logons and adds them to a ban list for RDP.
https://github.com/EvanAnderson/ts_block
You may also be interested in how you can send email notifications upon failed RDP logins that I posted here: How To Send Email Notification On Failed or Successful RDP Logon.