Block xmlrpc.php in .htaccess for WordPress
Open .htaccess file and paste below code at the end, replace IP with your server IP
# Block WordPress xmlrpc.php requests from other IPs
<Files xmlrpc.php>
order deny,allow
deny from all
allow from 104.25.x.x
</Files>