We have the same issue on https://klassegereedschap.nl. I see this issue is resolved but what was the solution?
Few things we install and configure default for our customers are the WordFence and Better WordPress Security plugins. That last one also gives advice on what you can change to make your WordPress installation more secure.
