My logs show attacks from 44 separate IP addresses since Wednesday, and my site is not well-known so this is just random scanning I think. This is for real, folks. Glad I'm running Apache on Linux.