I use Login lockdown http://wordpress.org/extend/plugins/login-lockdown/