Krydos will probably be able to answer when it was suspended, but it's worth noting that WP will cause load even if not public, simply because bots will pound on the login page. Also, if there's a backdoor due to malicious extensions or the like, those will often work with the site disabled. I would suggest fully blocking WP if you don't use it and don't want to delete it (putting a deny from all at the bottom of the .htaccess for WP will usually suffice).