XMLRPC or WP-Login: Which do Brute Force Attackers Prefer

XMLRPC compared to wp-login as an attack target in WordPress. Which is more frequently attacked and how to protect your site against brute force attacks.

Source: www.wordfence.com