Plugin best practices and locking down security

I’ve been using Limit Login Attempts for a few years now. Recently I’ve been getting several lockouts a day. 90% of the time it’s for the admin account. What are the best setting to use with this plugin? Are there any other security measures I can take?

http://ww.wp.xz.cn/extend/plugins/limit-login-attempts/