Whay not make CAPTCHA for login?

Almost all site use CAPTCHA so they don't get DDOs. Maybe it don't work for this I don't know.

Captcha is not used to prevent a DDOS attack. It is used to prevent access to bots. You can read up about it here:

A work of art is never finished, merely abandoned