Comment by jeroenhd

Putting random login pages at /wp-admin/ is great for farming IP ranges to block. They don't even need to go anywhere, all you need is a form with a login button and bots will try to log in.