title: How to prevent attacks on WordPress wp-login.php page
body: <p>On my website, the highest GPU usage is actually on the WordPress login page, not the home page. I have basically come to the conclusion that it is being attacked by a brute force attack, or something similar.</p>
  
  <p>I have installed a plugin that prevents password attacks from bots, <strong>but it doesn't prevent the bots from actually visiting the page in the first place</strong>.</p>
  
  <p>I want to change the location of the login page to something like wp-login-here.php, or perhaps there is a better solution. The <a href="http://wordpress.org/extend/plugins/stealth-login/" rel="nofollow">Stealth Plugin</a> seems like it would do the trick, but it is not compatible with recent versions of WordPress. Any ideas?</p>
  
  <p><strong>EDIT:</strong> The real solution to this problem was for me to do a clean install of WordPress, this time in a version that was supported by the Stealth plugin. After installing WP and the Stealth plugin on this earlier version of WP, I used the .htaccess file that the plugin created and copied it over (after making a few modifications) to the production site. The reason I accepted the answer I did was because Bad Behavior ended up being a good plugin, and the other advice was useful.</p>