Unusual Traffic on website. Need Help Securing my website

Hi, my google analytics is showing huge traffic from china from the past 3-4 days and it's increasing. Before my website gets hacked, Help me secure it. Suggest me a good lightweight wordpress security plugin.
Thanks in advance

That spike from China is usually bot/referrer spam and not real visitors. It’s a common issue and doesn’t always mean you’re hacked, but you’re right to secure things early. For lightweight WordPress security, I’d suggest starting with something like Wordfence (you can use the free version) or iThemes Security. Both are easy to configure and give you firewall + login protection.

Also, make sure you limit login attempts, disable XML-RPC if you don’t use it, and keep backups. If the traffic keeps growing, you can block suspicious IP ranges at server level or through Cloudflare’s free plan.