Wordpress DDoS via Pingback

.htaccess

<FilesMatch "^(xmlrpc\.php|wp-trackback\.php)">
Order Deny,Allow
Deny from all
</FilesMatch>

nginx.conf

server {
  location = /blog/xmlrpc.php {
     deny all;
  }
  location = /blog/wp-trackback.php {
     deny all;
  }
}