Locate your nginx configuration file and add the following rule in there.
location = /xmlrpc.php {
deny all;
}
Save it and reload the nginx service.
Now the user will get a 403 Forbidden response.
As a seasoned WordPress developer with expertise in various tech stacks and languages, I bring years of experience to every project I handle. My passion for coding and dedication to delivering exceptional work ensures that each project I take on is of the highest quality. I specialize in creating custom themes, developing plugins, and building full-scale web systems. By staying up-to-date with the latest industry trends and best practices, I incorporate cutting-edge solutions into my work.