Sucrui is great and we use it on a higher-traffic website that gets hack attempts constantly. Sucrui and the Simple Firewall plugin does a decent job, but Fail-2-Ban and ZBBlock help to alleviate problems that plugins don't catch, http://www.spambotsecurity.com/zbblock.php

WordPress is WordPress.. Server Security isn't the same! Properly configured servers, software and firewalls are not even covered in most articles.. Takes 5 minutes to secure WordPress.. But it can take hours to properly secure a server..