http://en.wikipedia.org/wiki/PHPIDS
https://github.com/PHPIDS/PHPIDS
It's more volatile, than your plugin Wordfence. It blocks serious attacks and is based on a threat level. So depending on what you have set for the threat level, you could easily get a lot of false positives.