Connect to wp-login.php and xmlrpc.php

I’m receiving many requests to my wp-login.php and xmlrpc file, now I simply arrange an htaccess to forestall requests to xmlrpc, however how do you counsel me to dam wp-login?

thanks