Previously I mentioned that you can use the .htaccess file to block access by IP address. If this is too much trouble or you don’t feel comfortable setting it, then there is another option that provides similar security. The AskApache plugin will create the .htaccess file with a username and password that is controlled at the Apache level to help secure the admin section of your blog.

A final plugin is Login LockDown which will disable the login function automatically lock out an IP range for an hour after 3 failed login attempts in 5 minutes. The plugin can be configured with different options. This will help stop the brute force password discovery.