yehudah

multipie ways to help block xmlrpc attacks.
This plugin have this options:
First Option: 
Log errors and access – to debug plugin errors and access to the xmlrpc file.
The protection options:
<ul>
<li>Disable xmlrpc – disable the file complete with wordpress built in option.</li>
<li>Block login errors ip’s in htaccess – every WRONG login attempt will be blocked inside the htaccess file.</li>
<li>Enable xmlrpc for a specific user – give permission to access the file to pre define user you will choose.</li>
<li>Disable xmlrpc built in functions – xmlrpc have many options and actions to query on your wordpress site, with this option you can choose which option to disable and wich to keep enabled.</li>
</ul>

xmlrpc attacks blocker

multipie ways to help block xmlrpc attacks.

latcomsystems

This plugin adds a comprehensive suite of security measures to WordPress. Simply install, activate, and rest assured that your site is now protected against most common attacks.
We attempted to create the “Goldilocks” of WordPress security by finding a happy medium between the really complicated plugins that seem to slow down your site and often break functionality because they are too restrictive, and the piece-meal ones that only address one or two vulnerabilities at a time.
The following areas of security weakness are addressed:
<ul>
<li>XML RPC Protection – stops unauthorized content injection.</li>
<li>Author Scanning Prevention – prevents revealing of user login names.</li>
<li>Malicious Script Blocking – stops execution of scripts in specific vulnerable directories.</li>
<li>Comment Spam Prevention – adds a CAPTCHA to the comment form.</li>
<li>User Login Protection – includes automatic timed failed login attempt lockouts and CAPTCHA for login page.</li>
<li>Automatic IP Ban – bans IP’s from the entire site based on number of failed login attempts.</li>
<li>IP Blacklist – allows adding known bad IP’s and bans them from the entire site.</li>
<li>IP Whitelist – allows adding known good IP’s.</li>
</ul>
This plugin also provides a log of all login attempts including geographical IP data.
Temporarily locked IP’s can be unlocked by the administrator.
Permanently banned IP’s can be un-banned by the administrator.
CAUTION: Do not use this plugin with other security plugins to avoid conflicts and other site issues. Use only one active security suite at a time.
<h3>Support</h3>
<ul>
<li><a href="mailto:sysdev@latcomsystems.com" rel="nofollow ugc">sysdev@latcomsystems.com</a></li>
</ul>

LCS Security

This plugin adds a comprehensive suite of security measures to WordPress.

xmlrpc attacks blocker vs LCS Security