All the tips for strengthening WordPress are good

[rifathasan]

Don't do any of the following because they create more problems than they solve or are ineffective as security measures:

Hiding WordPress Version Number
Change login address
Changing the database prefix
Also, avoid the following: You should not configure security settings in such detail, as this can become problematic if you manage multiple sites.

Geo-blocking : Geo-blocking involves blacklisting a skype database set of IP addresses that correspond to a geographic location that you want to block from your site. This could be a city, country, or region. However, IP addresses are not always 100% accurate, so you may end up blocking the visitors you want to see from your site. Additionally, if you block certain countries, search bots operating in those countries will not be able to index your site.
Protecting individual core files: A good firewall should take care of this, and a reliable scanner will quickly find malware in WordPress core files.