I just wanted to add that changing the WordPress login page may help, especially for beginners who know nothing about WordPress security. This can be a solution for regular blogs, but for membership websites, that needs extra work. There are some plugins that can help in that case. I hope that WordPress can fix that in the next update of June or later.