We have a firewall with modsecurity installed. I would like to write a rule to block any IP address for 24 hours if that IP requests xmlrpc.php. Please note that we do not use WordPress on our platform but these requests are consuming huge amounts of traffic.
Block IP requesting xmlrpc.php
security;mod security