You can enter the following code to your .htaccess file which will block access to that file and keep them bots from wasting your accounts resources:
<Files "xmlrpc.php">
Order Allow,Deny
deny from all
</Files>
<Files "xmlrpc.php">
Order Allow,Deny
deny from all
</Files>