Finally, clean hacked wordpress site will also tell you that there is not any htaccess from the wp-admin/ directory. You can put a.htaccess file into this directory if you desire, and you can use it to control access by IP address to the wp-admin directory or address range. Details of how to do that are available on the net.
An easy way to keep WordPress safe would be to use a few tools. To begin with, don't allow people to list the files in your folders, run a web host security scan and automatically backup your entire web hosting account.
You should also set the"Anyone Can Register" in Settings/General to off, and you ought to have some type of spam plugin. Akismet is the one I use, the old standby, but there are many of them nowadays.
BACK UP your site and keep a copy on your own computer and storage. For those who have a site that is very active, back up daily. You spend a whole lot of time and money on your website, do not skip this! Is BackupBuddy, no back up plugins, widgets, your documents and database. Need to move your site this will do it in under a couple of minutes!
There are always going to be risks being online (or even just being alive!) And it's easy to get caught up in the fear. We put the breaks on, As soon as we get caught up in the panic. This isn't a fantastic response. Simply take some common sense useful link precautions, then forge ahead. If something does happen, it is going to need to be dealt with then and no amount of quaking in your will have helped. If nothing does, all is good and you haven't made yourself ill with worry.