Detects bruteforce on wordpress API 'xmlrpc.php'.

**Warning**: Some plugin heavily rely on the xmlrpc, by enabling this scenario you could block your own server.
Be sure to check the source of the calls on the XMLRPC API before enabling this.

leakspeed of 2m, capacity of 5
