Pretty common practice. They troll for known files, hoping that with remote includes they can uncover some database logins and start having fun! I see them oin the logs all the time, which is why Matt is always warning to keep your software up to date.