I've also used Login Lockdown which does the same thing as Limit Login Attempts - also you might want to change your WordPress user name to something other than "admin" so it makes it even more difficult to get in.