Comment on Automatically Block XML-RPC Brute Force Amplification Attacks Against WordPress by Tanguy. Hi Paul, Not sure to add this protection as I don’t know which plugins might use XML-RPC.