Install the fix wordpress malware virus Firewall Plugin. This plugin investigates requests to identify and quit most obvious attacks.
This is fantastic news as it means that there's a community of users and developers who could enhance the platform. However, whenever there is a group there'll always be people who will attempt to take down them.
You first must create a new user with administrator rights, before you can delete the default admin account. To do this go to your WordPress Dashboard and click on User -> Create New User. Then enter all the information you need to enter.
What if you visit WP-Content/plugins, can you view that folder? If so, upload that blank Index.html file inside that folder you can try here as well so people can't see what plugins you have. Because even if your version of WordPress is up to date, if you are using an try this web-site old plugin or a plugin using a security hole, then someone can use that to get access.
However, I advise that you install the Login LockDown plugin instead of any.htaccess controls. From being allowed after three failed login attempts from a certain IP address for one hour, login requests will stop. If you Continued do that, you can access your panel while and yet you still have protection against hackers.