Basics....
https://ithemes.com/2016/10/13/how-t...ly-and-easily/
Good plugin...
https://wordpress.org/plugins/all-in...-and-firewall/
If that doesn't do it could route DNS through Incapsula to kill off some bad shit before it even gets to your server. CloudFlare more popular and a good CDN but in terms of security Incapsula's free plan blocks more bad shit out than CloudFlare's paid plan.
