title: How to protect wp-login from attack on apache/nginx
body: <p>I would like to ask you if you know any method in apache or nginx to restrict the access to wp-login, but not for the whole server. What I mean is:</p>
  
  <p>For example there is a server with Apache/Nginx and there are a lot of hits to wp-login.php /xmrlpc.php or admin-ajax.php . The load of the server is getting really high if I do not deny the access via .htaccess file for the whole server. Is there any configuration or software (not wp plugins) which might help in my case? For example if its possible to restrict the access if the same IP is hitting wp-login.php more than X(number) times? </p>
  
  <p>Thank you in advance!</p>