SOLUTION: After searching for several anti-virus plugin for WordPress I finally found one that protects all my websites, form these attacks in addition it also has a falcon setting to increase the speed of your website.
You can download a copy of the plugin here: https://wordpress.org/plugins/wordfence/
The settings I suggest is after 5 invalid logins, or password recovery attempts block the user for 6 hours, enable the falcon settings under performance and enable auto update.
These settings have prevented a huge number of attacks on my sites.
