xmlrpc.php is already blocked by htacess. So this one won’t make the trick.

Where do I need to check user creation? We are running woocommerce on the websites so customers still need to have accounts.

Thanks!

Weird thing, there are not a lot of people talking about this problem through google!