Naughty would-be admins (all 125 of them)

One of the plugins I use on this blog is Better WP Security. Among its features it records any bad login entries. These are people and/or bots trying to enter the admin area of the blog by trying out various username/password combos, hoping to get lucky so they can do all manner of nefarious deeds once allowed in.

As you might guess, the most common username used in these attempts is “admin” and it’s why basic security has you change it from “admin” to anything else (I’ve done this, in case any bots are reading).

Sometimes the username entered is more curious than “admin”. For example:

Bernardo1133

Did Bernardo get misdirected or confused? Did he think he was signing into his own blog? What are the other 1132 Bernardos up to, anyway?

BroderickCrook

Oh, I just bet you are a crook, Broderick! Nice try, buddy.

creolened

Clever bot. But not clever enough.

DebWordenrfai

This one may have been trying to login to World of Warcraft.

What’s sad is the number of legitimate visits to the site is usually in the range of less than 10 per day, meaning the blog on average is more than ten times as popular as a potential hacking target than as something to read. On the plus side that less-than-ten number is still more people than ever read my paper journal.

Leave a Comment