these likely from spam bots.
useful codex:
http://codex.wordpress.org/Hardening_WordPress
http://codex.wordpress.org/Brute_Force_Attacks
also look into this plugin: https://wordpress.org/plugins/zero-spam/
↧
Tara on "Malware and access logs"
↧