I've been having trouble with my site for like the last week. I'm pretty sure it's been under attack pretty much constantly; I detailed the problem here.
help setting up fail2ban from git
I'm wondering if whomever it was didn't get in because today when I check the logs cron keeps running like constantly like this.
91.185.187.49 - - [18/Jun/2023:10:41:53 +0200] "POST /wp-cron.php?doing_wp_cron=1687077713.4371969699859619140625 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:41:53 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 67 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
91.185.187.49 - - [18/Jun/2023:10:42:53 +0200] "POST /wp-cron.php?doing_wp_cron=1687077773.4159150123596191406250 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:42:53 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 65 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
91.185.187.49 - - [18/Jun/2023:10:43:54 +0200] "POST /wp-cron.php?doing_wp_cron=1687077833.4016160964965820312500 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:43:54 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 67 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
91.185.187.49 - - [18/Jun/2023:10:45:55 +0200] "POST /wp-cron.php?doing_wp_cron=1687077955.3985960483551025390625 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:45:55 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 67 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
91.185.187.49 - - [18/Jun/2023:10:47:56 +0200] "POST /wp-cron.php?doing_wp_cron=1687078076.4135789871215820312500 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:47:56 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 67 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
91.185.187.49 - - [18/Jun/2023:10:49:57 +0200] "POST /wp-cron.php?doing_wp_cron=1687078197.4028968811035156250000 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:49:57 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 67 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
91.185.187.49 - - [18/Jun/2023:10:51:58 +0200] "POST /wp-cron.php?doing_wp_cron=1687078318.3798110485076904296875 HTTP/2.0" 200 20 "-" "WordPress/6.2.2; https://diygamecontrollers.win"
71.223.107.254 - - [18/Jun/2023:10:51:58 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 200 67 "https://diygamecontrollers.win/wp-admin/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51"
The ip address that starts with 71. is me, but a cron job hasn't run every time I do anything like that previously?
Again any help is appreciated.
David