bots hitting hidden files
 

My shared hosting company has told me I am using up too many resources. But some of the files they specified that were the problem seemed curious to me. The list is below. Aren't some of those files* like private.php* only available to logged in users? If a bot tries to go to that link* won't the server just show the "you are not logged in" page* instead of using up database resources?

search.php
newreply.php
friendmessage.php
showthread.php
printthread.php
private.php