Have I been hacked?

Hi
I have been fixing this site that wasn’t updated for years (wp-core was but not all plugins). I just put it behind cloudflare and deployed a firewall rule that blocks bad bots and allow good ones. In the cloudflare firewall log I get this block. Which seems odd at least, and doing a cronjob. Any ideas? Changes salts and enforced 2fa for admins and editors so far.
Ray ID
61a51bbc9e2833as
Method
POST
HTTP Version
HTTP/1.1
Host
(own site)
Path
/wp-cron.php
Query string
?doing_wp_cron=1612113678.4625999927520751953125
User agent
Bot1rNagguX6
IP address
185.76.64.167
ASN
AS200719 MISSDOMAIN
Country
Sweden

• This topic was modified 5 years, 4 months ago by anderslinn.

The page I need help with: [log in to see the link]