You may want to check your webserver access log. You may be the target of an xml-rpc attack in case the log is flooded with xml-rpc posts(e.g. "POST /xmlrpc.php HTTP/1.1" 200 403). There are various ways to prevent it from happening, but Wordpress is prone to this.