Excellent plugin, after a recent hack like event on my site which I thought I had cleaned up ( I had), I got round to getting Wordfence working- I'd had an issue which made me deactivate it. My bad.
Whilst I had removed the offending extra pages they had managed to upload, i had missed the php file they had used to upload their crap. Wordfence got it in about 50 seconds!
Also scary how many people per day try to login to an innocuous WP site with the default "admin". Locking them out slams the door, and hopefully they will move on.