fix wordpress malware will tell you that there's not any htaccess in the wp-admin/ directory. You may put a.htaccess file into this directory if you wish, and you can use it to control access to the wp-admin directory by IP address or address range. Details of how to do that are available on the net.
Essentially, it will start with the basics. Attempt using complex passwords. Use special characters, numbers, letters, and spaces and combine them to create a special password. You can also use usernames that aren't obvious.
Keep control of your online assets - Nothing is worse than having your livelihood in somebody else's hands. Why take chances with something as important as your website?
Install the WordPress Firewall Plugin. Prevent and this plugin investigates web requests to identify attacks that are most obvious.
The plugin should be updated play nice with all your plugins to remain current with the latest WordPress release and have WordPress cloning and restore capabilities. The ability to clone your website (along with regular backups) can be useful if you you could check here ever need to do an offline site redesign, among other things.