My site is attacked constantly – mostly out of Russia. They’re using the ‘admin’

My site is attacked constantly – mostly out of Russia. They’re using the ‘admin’ account and then getting banned for failed login attempts. (a) there is no admin account and (b) i use strong passwords. But what I found is that if you return ‘wrong password’ they keep trying the admin account. lol