|
If your IP is static, block everything but that from the login page. That's pretty much your problem solved.
If your CAPTCHA is generated by third party software that is popular enough, the bots will already know how to parse and solve it.
Have look into plugins that will block IPs which repeatedly fail logins, or generate multiple 404s from scanning several URIs.
|