At my end I try to keep things patched, check the listening ports and run Tripwire, rkhunter etc.
Cheers for the Wordfence tip, I'll take a look.