[WikiEN-l] Please change your passwords.

[Joe Szilagyi]

There likely is a good reason not to do this related to the volume of
traffic *overall*, but in normal use how many http requests for this string
will be seen?

Special:Userlogin

As in,

http://en.wikipedia.org/w/index.php?title=Special:Userlogin*

How many should you be seeing? Couldn't they script up a tool
administrator/development level to see what IPs are tagging that sort of
string more than x times per minute or something? Or, perhaps, should the
Login function log IPs used for *attempted* logins vs. a given user name?
You could then with Special:Checkuser see who/what is trying to login as
whom.

-- 
Regards,
Joe
http://www.joeszilagyi.com