You need a static IP for it. And you need to have a front-end user profiles editor if you have users on your site
It is not sufficient for you site. You have to use subscribe plugin that prevent your site from harmful attack. You can choose any security program that work specifically.
I would use Wordfence As I have used it for many years with fantastic results. The free version even does a pretty good job if you don't want to pay for the full version. Also renaming the admin folder is a must.
Guys, seriously. All In One WP Security & Firewall https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ Even Yoast recommend this plugin . https://yoast.com/wordpress-security/