Here are a couple of plugins I use to protect my WordPress sites.
Limit Login Attempts
Ultimate Security Checker
Wordpress Firewall 2
WP-Ban
Change your admin username, create a new account (do not call it admin) and give it admin privileges and delete the original admin account. Use capital letters, numbers and special characters in your password. Passwords should be greater than 8 characters. I normally have mine over 10.