Baa,
Looks like the 404.shtml has been configured (probably by default) as the handler for 404 errors. You can create a page with that name to display a standard 404-type page and those log entries will all go away. It does look like someone is trying to "find" pages manually, or using a script, but that's not in itself something to worry about

Paul