That'd be the URL for actual login requests, so traffic to it is normal. The amount of traffic to it is potentially subjective. If you're seeing a lot of traffic to it, it could be a target of someone bulk testing credentials, though we do have some security protocols in place to make this more difficult.