1. All In One WP Security - this has a lot of features that are very helpful and will automatically update the .htaccess file.
2. iQ Block Country - allows for quick block of visitors from selected countries.

Also, change the default username and password of the WP admin and also the created a new username and password to connect to the DB