WordPress sites are under attack all the time. I have found three free plugins that help me protect my WordPress website. I add a fourth bonus plugin.
The first is “Wordfence Security.” It is an does basic monitoring, blocking, and anti-virus, Firewall and Malware Scan.
https://www.wordfence.com/
Second is “Hide My WP Ghost Lite.” This hides WP CMS, 7G/8G Firewall, Brute Force Protection, 2FA, GEO Security, Temporary Logins, Alerts & more.
https://hidemywpghost.com/.
Third is “IP2Location Country Blocker.” Block visitors from accessing your website or admin area by their country.
https://www.ip2location.com/
Fourth, is “JetPack.” In setting under the Security tab I enable Firewall and Brute force protection. I use the plugin for other reasons, so it is not essential for security.
https://jetpack.com/
