These two centos servers (47.100.186.199 and 47.100.213.225) run very useful services in our factory's MES system, such as mqtt proxy service, production equipment data collection and transmission, etc., but I don't know why the files are often tampered with. Can anyone help?