Rebooting the VPS is unlikely to solve the problem if it has been compromised. Please investigate the issue further and update us once it is fixed.
Below are some security practices for securing your VPS if possible intrusion detected:
* Changing all passwords and making sure new ones are strong.
* Enabling firewall to block any unauthorized access via ssh, ftp, or RDP for Windows.
* Making sure software running on VPS is up to date such as wordpress, including all plugins as well as themes.
* Check and stop or remove any suspicious software that is found running.
* https://www.vultr.com/docs/setting-up-clamfs-and-clamav-on-ubuntu or https://www.vultr.com/docs/scan- ... inux-malware-detect
depending on your OS to scan for malicious software and there are free Windows anti-virus software when googled.
* Booting into single user mode or safe mode until you have removed the source of the intrusion will prevent more servers outside our network from being attacked.
* If no data is needed on the VPS instance, we recommend destruction/replacement.