My first step isn't one you must take but it helped me. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did before I even started my website, what I should have done. And here is where I would like you to start. Learn how to protect yourself until you get hacked. The thing about rename your login url to secure your wordpress website and why so many people recommend it is because it is really easy to learn. That can be a detriment to the health of our websites. We need to learn how to add a security fence around our site.
Don't depend on your internet host - Many people depend on their web host to"do all that technical stuff for me", not realizing that sometimes, they don't! Far better to have the responsibility lie with you, rather than from your control.
It represents a necessary task while it's an odd term . We are not simply being obsessive-compulsive here: servers go down every day, despite their claims of 99.9% he said uptime, and if you've had this happen to you, you understand the panic is it can cause.
Upgrade, if you're not currently running the latest version of WordPress. Leaving your site is similar to keeping your door unlocked when you Check Out Your URL leave for vacation.
However, I recommend that you install the Login LockDown plugin as opposed to any.htaccess controls. That will stops login requests from being allowed from a certain IP-ADDRESS for an hour or so after three failed login attempts. You can why not try these out still access your admin cell while from your office, and yet you still have protection against hackers, if you accomplish that.