Change URL of Customer Login page (main page=login)

[hifipj]

Hi,

Running 1.5.5.e, using ZC since 2007.

Having an issue, searched and can't find this question. I'd like to change my customer login page URL.

From the normal "main page=login" to something similar, like login_new, cust_login, etc.

Why?

I'm repeatedly getting hit with DDOS attacks, going to the login page and trying to log in from 100s of different URLs (I am guessing, to access a Premium area trying with random username/PW?).

I have hundreds/thousands of attempted accesses like this:



00:15:12 0 ¥Guest 192.111.129.150 16:57:18 16:57:31
Time Since Clicked:
00:14:59 ago Session ID: fqvdb27cv4ej1jagm7ii5hq3q3
Host: 192.111.129.150
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36
/catalog/index.php?main_page=login&action=process


There's no damage being done to the site, other than wasted unneeded bandwith, and I'd really like to get rid of these electronic cockroaches.

Yes, I can block each of the 100s of individual IPs, have done that before, very time consuming.

Thinking if I just change the code so main catalog page points to a different URL when you hit login. And then I can change it from time to time, to foil these idiots.

Can anyone help and point me to where the name of the login page is defined, and how I may successfully change it without messing anything esle up?

Thanks!!

[mc12345678]

What about links that customers save to go to the login page? If constantly change this, won't they be disrupted? And yes, I'm thinking of the "301" type redirect as well, because if a 301 redirect is used to then keep things "straight" the initial "problem" doesn't get addressed because even those DDOS will just get directed to the place where they weren't desired to go...

I don't see a ZC version described, is it possible that these "visitors" aren't being recognized as spiders and that is how/why they keep being provided enough information to keep trying?