After being attacked many times and compromised I installed Sucuri for monitoring. Seeing how many times a day I was being brute forced, I decided to turn off the wp login page, but I still get notifications of a failed login.
How is this possible if there's no login page to speak of on my site? How can bots access that page or try to login if it is not present?