How to block xmlrpc attacks at cpanel

xmlrpc.com is a WordPress file that was intended to be used for API’s but lately it’s more and more used as a way for hackers to brute-force WordPress installations.

To block access to xmlrpc.php on a single WordPress installation add the following code to your .htaccess file:

# Block XML-RPC
<Files xmlrpc.php>
order deny,allow
deny from all
allow from 127.0.0.1,
</Files>
# END WordPressCopy