My hoster doesn’t allow me to allow all connections to XML-RPC, so I can’t use the first solution.
I also can’t use the second solution, because I only can whitelist up to 73 single IP-adresses and not whole IP-nets.
Maybe you can tell me the 73 most important IP-adresses, so I can whitelist them?