I also found this behavior of WordPress. It generates a virtual robots.txt if you do not have a real robots.txt in the home directory of your website.
To stop WordPress from using the virtual robots.txt, you need to create a robots.txt file in the home directory (public_html). Thus, the web server will serve your robots.txt instead of WordPress's virtual one.