Password protect wp-login.php

You can use .htaccess to protect your wp-login.php. The Codex describes how to do so.

There are also some plugins which do that job for you, finding and choosing a good one is up to you.