The XML-RPC is a system that allows login and remote updates to WordPress from other applications.

If you need XML-RPC functionality (e.g. if you use the WordPress iPhone/Android App), and you want to by-pass login protection rules, simply enable "XML-RPC Compatibility" option. 

To achieve this, select General Settings from the Settings drop-down list => Plugin Defaults => and enable XML-RPC Compatibility option: