How to fix php errors: "client denied by server configuration"?

Question

WordPress

Hello. I have a WordPress site on a regular hosting, I don’t have access to the server settings, that is, everything is standard there. The following pops up in the request log a day later: [authz_core:error] [pid 3880] [client 5.135.143.224:56824] AH01630: client denied by server configuration: /var/www/site.com/xmlrpc.php. There are few such errors, 20 from one or two addresses, what could be the problem?

In the .htaccess file (the one in the root of the site) there are only All In one WP Security plugin rules and CNC settings

RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

Answer 1

These are attack bots for vulnerabilities in WP or ddos.
In general, if you don’t use remote publishing through desktop applications or api, then it’s easier to disable it completely:

<Files xmlrpc.php>
 Order Deny,Allow
 Deny from all
 </Files>