We have a Wordpress site that suddenly saw a surge of hacking attempts. Turns out they all had IE7 user agents. Blocked that, not a problem anymore. Wouldn't surprise me if big sites use simple measures for such simple attack attempts as well.