After seeing several articles about servers being attacked, and all of them happening in the past few days, this group of people has become active.
You might want to take a look at Teacher Du's "Server Operating System Security Hardening Items" at https://dusays.com/737/
Or migrate the domain to cloudflare
Or use xLOG like me.