What plugins does everyone use to enforce the security of their websites? I myself use a plugin called Login Lockdown which blocks out any IP address that attempts to sign in with an incorrect password or username. I also get notified of the IP which attempted the login so I can take the required actions.