Ya know, I don't so much mind that there are thousands of requests for non-existent .php files in my blog web server logs, it's that they come from so many different IP addresses. Honestly, people, either I have an unsecured wp-login.php or I don't, and the first person who gets there is gonna patch the hole. It's wasted effort.