Hi,
Yes, using premium plugins is also a good option. Additionally, please make sure that registration is disabled in the WordPress/Settings/General section, this enables the back-end registration form and many spam bots detect it.
I hope this is helpful to you