Hi Gioni, I did actually disable both XML-RPC and wp-login.php, but I’m still getting bombarded with “failed” attempts to login from soviet countries with user names like admin, administrator, https://www.mydomain.
Any idea what I could be doing instead? I wish I could just blacklist a whole country.