The DDOS attacks can put a heavy load on the server and the MYSQL database

You can deny access to wp-login.php based on the ip address if you don't allow visitors to log in

alternatively, you can use basic authentication

and deny access unless users have a username/password

you could create a generic user/password and display it on the blog or the login screen to allow visitors to login, but the bots won't see that.

That...

For any wordpress installation, Wordfence is as far as I am concerned the ultimate defense. It has several settings that need to be adjusted for best protection, although the defaults are almost good enough.

Another plugin to add is bulletproof security

The best thing we can do is secure passwords. you can take something easy to remember, add a twist only known to you and have one virtually impossible to crack. My favorite is dog

But you have to personalize...

You can create a page template and include your html page.


Use the code below:

<?php
/*
Template Name: Html Page

^^ this is important you can name the template anything you want.
"Template Name:" must be exactly as above

You need to "Add New Page" from the wordpress dashboard.

You just need to fill in the 'Page Title' and you need to go into "Page Attributes"...