Hello @non888
As @shokun0803 said, the massive attacks are from old vulnerabilities and for sites not updated…
Moreover, as @ishitaka told you, you have the WPVulnerability API, and also the plugin to check
https://ja.wordpress.org/plugins/wpvulnerability/
There are more than 15,000 vulnerabilities processes there.