Why are there so many attempts by an anonymous user to access /wp-login.php? I looked at /admin/reports/dblog today. There were five request in two minutes by an anonymous user to view /wp-login.php. These requests have been happening for an hour at least and continue 2-3 times per minute.


What are the possible explanations for this strange behavior?
What can/should I do about it, if anything?
As kiamlaluno said:


  It's just bots scanning for exploits. You don't need to do anything,
  except serving a faster 404 response for those pages, as described in
  drupal.stackexchange.com/a/152732/199.