/wp-admin/admin-ajax.php getting a bunch of hits, but why?

Googled and found others with the same problem but no real answers. Any of you having this happen on your wordpress install? Trying to clean this site up and judging by its stats it’s a mess. Got a bunch of 404′s too, 55% of this months traffic are hitting 404′s. Not sure why

I don’t have the slightest idea. This is one of the sites hostgator contacted me about saying it was eating resources. Had me install wp super cache and some database caching plugin. I don’t even know why it has so many 404′s.

I also have around 3,000 hits to wp-cron.php which don’t make sense

Log into your CPanel and check for any cron jobs which weren’t set by you, and look at that files source to, I reckon.

Had simular problem like this myself with my own blog, I didn’t think any of it really, I just thought these pages got indexed by Google and were gaining irrelevant hits

none

Password protect /wp-admin with .htaccess and .htpasswd

what all would I need to do. There’s more to it than just renaming it, isn’t there? Oh and won’t this just give me more 404′s

isn’t it already?

wp-admin is password protected by wordpress, but obviously if there is a vulnerability it may be possible to exploit and get access to wp-admin without authenticating in the normal way. Using .htaccess/.htpasswd means that you have a method of password protection not connected to wordpress, so it’s an extra layer of security. You could instead of password protecting just have a line allowing only your IP addresses if you have a static IP.

Just chuck a password protect on the folder actually.

oh the ajax file and others arent password proected they can be run by anyone without logging into the admin console.

nothing special. Made that post when her second round of nudes appeared.

damn it is indexed. If I search the url in google it comes up. If I go to the page it’s just blank with -1 in the upper left corner