Hi, here is some tips & tricks :
Easy steps :
1. Use Google CAPTCHA for all type of forms.
2. Use Web Aplication Firewall like Apache ModSecurity Free rules from COMODO
3. Use a secondary autentifications with .htaccess or set in CPanel / Plesk the "Password Directories" when you want to access...