What are the best solutions to improve the security of a WordPress site?

Question

Malware

Greetings!
There is a site with a lot of traffic, made on Wordpress. Currently hosted in Russia. The site owner is located in Spain. Site visitors 40% from Russia and the same number from Spain. The site is regularly tried to be hacked by guessing passwords. The task is to maximize the security of the site, which at the moment is solved only by the appropriate plugins. The option of transferring to European servers is being considered, so the site will be in the middle of the target audience, is there any point in this?
Planned hosting with a dedicated IP and the purchase of an SSL certificate. Can anyone recommend a good, proven hosting for years? It is clear that trying to brute force passwords is just an attempt, but security is needed above average. Approval of paid protection solutions is also possible. Or maybe it will be enough to set up two-step authorization and good hosting, which has basic protection?
I would be grateful for personal experience and good advice!

Answer 1

Here is a well written about the basics of WP security, and what exactly needs to be done
www.wpbeginner.com/wordpress-security

Answer 2

Protect not only wordpress, but also the site on which it is located, fail2ban has never bothered anyone. Configure iptableds to only be accessed from trusted networks. And protect 80, 443 (web ports) with plugins and general settings.

Answer 3

https://habrahabr.ru/company/xakep/blog/259843/

Answer 4

I can recommend this service . A complex of CDN + firewall + backups with a file change control system + antivirus. Many ready-made solutions for WP. In case of any problems, instant notifications arrive by SMS, telegramm, by mail.
There are paid services for setting up professional protection with a guarantee.