WordPress search attack CC attack defense Nginx anti-brush search

WordPress anti-refresh, WP security is the first priority. The most distressing thing for many friends who build websites is that when the website has no traffic, they rack their brains to do traffic diversion and publicity. After the website has traffic, good and bad things come together. The website was attacked inexplicably. Now many websites are small blogs built with WordPress. Usually there are only a dozen people online at the same time. Why does the server CPU run at 100% and the memory instantly soars to the top?