/login 123456. /login 12345. /bungee. My server doesn't use bungee and is managed by my own Plugin, so this definitely is no security threat .