I am checking my apache error log, and I see a weird pattern.
Same IP requests, within 1 second, pages that are 'common' in websites: wp,wordpress,joomla.. etc.
Because this specific domain doesn't have any of these folders, it returns immediately return 404.
Would you recommend blocking this IP? Or could it be legitimate somehow? Is there any tool out there, preferably free, or at least low cost, that can track these suspicious common attacks?