Hi Jeff
I used to use Limit login attempts but now I use the WordPress simple firewall plugin http://wordpress.org/plugins/wp-simple-firewall/

This plugin limits login attempts, adds a GASP type function to your comments and a few other security bits and pieces.

For security monitoring I use the Sucuri paid service.