To block access to xmlrpc.php on a cPanel server, you will need to:
1. Edit /etc/httpd/conf/includes/pre_main_global.conf
2. Add the following to the bottom of this include file:
<IfModule mod_alias.c> RedirectMatch 301 ^.*/xmlrpc.php$ http://127.0.0.1/ </IfModule>
3. Restart httpd. (service httpd restart)
4. Test accessing xmlrpc.php on a WordPress site on the server. (e.g. www.example.org/xmlrpc.php)