Hey brother, you can also limit the login attempt. If the login failed in several times (you decide), then that username will be block automatically.
It's in wordfense setting.
Limit it to as small as possible if you are the only one who can access the backend of your site.
It is extremely useful in my case.