Here are some of the files the jerks who want to run exploits look for. I see these in my 404 stats.

       /stats/awstats.pl
       /scgi-bin/stats/awstats.pl
       /scripts/awstats.pl
       /scgi/awstats/awstats.pl
       /cgi-bin/stats/awstats.pl
       /cgi-bin/awstats/awstats.pl
       /cgi/awstats/awstats.pl
       /scgi-bin/awstats/awstats.pl
       /cgi-bin/awstats.pl
       /awstats/awstats.pl
       /cgi/awstats.pl
       /scgi-bin/awstats.pl
       /b2evo/xmlsrv/xmlrpc.php
       /wordpress/xmlrpc.php
       /blogtest/xmlsrv/xmlrpc.php
       /phpgroupware/xmlrpc.php
       /b2/xmlsrv/xmlrpc.php
       /blogs/xmlrpc.php
       /blogs/xmlsrv/xmlrpc.php
       /community/xmlrpc.php
       /xmlsrv/xmlrpc.php
       /drupal/xmlrpc.php
       /xmlrpc/xmlrpc.php
       /xmlrpc.php
       /x0x0x0x0x0x0x0x0x0/ThisFileMustNotExist

(This post is named for a scene in “The Blues Brothers.” Belushi’s “Joliet Jake” Blues’ tone when he sneers at the Illinois Nazis is exactly how I feel about sploggers, script kiddies, and other miscreants).