Depends on what you want to pay. There are some companies that will test your firewall and verify that they are unable to connect.
You should be able to prevent many of the access attempts form your firewall.
One good practice that most do not follow is to rename or completely disable the administrator account on your servers. This way not only will they need a password, but they would need to know an administrator account.
