We've added special backend template for Wordpress users, which can help you to block harmful bots, which scan internet for Wordpress and trying to hack it to deploy harmful payload.
To use this templace Log in to your account in Hestia panel, under "Web" tab choose required website, click "Advanced options" button, than change "" option to "wordpress-antibruteforce", than click "Save" button.
This will apply additional restrictions from server side, which will block any requests to xmlrpc interface and admin panel. To get access to you admin panel you need additional login and password, which you can request via tickets.