I guess those installs are the ones the Wordpress vuln scanners are looking for when they spam my server with /wp-admin/ requests.