I put this in my main directory .htaccess to redirect anyone but my IP to a 404 error page when trying to access the wp-admin directory or xmlrpc.php
Code:
ServerSignature Off
RewriteEngine On
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{REQUEST_URI} ^(.*)?xmlrpc\.php(.*)$ [OR]
RewriteCond %{REQUEST_URI} ^(.*)?wp-admin$
RewriteCond %{REMOTE_ADDR} !^YOUR.IP.ADDRESS.HERE$
RewriteRule ^(.*)$ - [R=404,L]
</IfModule>