repair hacked wordpress site will tell you that there is not any htaccess from the wp-admin/ directory. You may put a.htaccess file into this directory if you wish, and you can use it to control access by IP address to the wp-admin directory or address range. Details of how to do this are available on the net.
Safeguard your login credentials - Don't keep your login credentials where a hacker might find them. Store them off, and even offline. Roboform is very good for protecting them, also. Food for thought!
This is very handy plugin, protecting you against brute-force strikes that are password-crack. It keeps track of the IP address of every login attempt. see You her latest blog can configure the plugin to disable login attempts when a certain number of failed attempts is reached.
Now it's time use this individual's name and identity to pose as your friend and to register for a Facebook account. After I get it all set up, I'll be telling you posing as your friend and asking you to be friends with me on Facebook (or Twitter, or whichever societal site).
The More Info plugin should be updated have WordPress cloning, play nice and to remain current with the latest WordPress release and restore capabilities. The ability to clone your site (in addition to regular backups) can be useful if you ever want to do an offline site redesign, among other things.