wp-admin/admin-ajax.php 1900 Hits per day (Help Needed)

Hello everybody,
Looking at the statistics of one of my wordpress websites I found more than 1,900 hits per day to admin-ajax.php. Is that number of accesses to the file normal or could it reveal a hacking attempt?
Thanks a lot.

Hi sirblack,

First of All Make sure you are using the latest version of Wordpress. Update All the Plugins and make sure to change the admin login details.

Use This Security Plugin: https://wordpress.org/plugins/better-wp-security/

It will stop any BruteForce Attack and prevent any hacking attempts.

Hope it solve the issue.

Wordfence in the options.

yes,thats clearly a hacking attempt.

I think there are many apps that prevents access to those pages unless its refered from the admin panel.Try one of those.

If I was in your case, I would make the page to display a "Fuck OFF" message to the guy who is trying it Also would capture his ip/location. But I think you can already find that from Awstats if you have it in cpanel.

As a WordPress developer, I see this is common in WordPress. I am pretty sure that it's not hacking attempt.
Note: Make sure to check your traffic logs for the sources of traffic that visiting this page.

It's called WordPress Heartbeat API.
WordPress uses it to manage functions such as Post Locking and Auto Saving etc. Some WordPress developers also use this API to make their plugins or themes functions, too.

The more you access your dashboard or leave it idle, the more Heatbeat API sends request to wp-admin/admin-ajax.php Heartbeat requests.

If you're active working in your dashboard, Heartbeat requests will have a max 60 seconds in each request delay.
If you put your dashboard sit idle, it will have a max of 120 seconds in each request delay.

You could DISABLE it or Increase delay time between each HEARTBEAT request.

Just a hint, disabling it could cause issue with functions that use the API.