Hi, I am having the same issue on a site I manage. The Scan has identified a user logging in via wp-admin/admin-ajax.php which I dont recognise. IT says it is a human. I have cleared the cache as per the recommendation above. Now sending email via Diagnostics.