Original article : https://www.ithome.com.tw/news/127562
Solution :
Close XML-RPC in WORDPRESS. Https://wordpress.blog.tw/disable-xml-rpc/.
After the scenery theme is updated, you need to close XML-RPC again.
Limit the number of failed logins
Don’t use admin, words, words as an account
Use nicknames to avoid account exposure
Sign in to your account with 2-stage verification
Delete BLOG login button –> change login page wp-login.php (external WPS Hide Login)