Also check out the listed threats. That'll help.
There are also plenty of FREE plugins that do this with one click.
Wordfence also lets you do this and restrict IPs to the admin page.
@IRJ Thanks for the tip on renaming the wp-login. I just added that.
Looks like your connection to MangoLassi was lost, please wait while we try to reconnect.