block WordPress xmlrpc.php requests .htaccess
# Block WordPress xmlrpc.php requests <Files xmlrpc.php> order allow,deny deny from all </Files>