Someone explain this to me is my server gothacked

I found this strange and scary logs in my apache.

Now I wanted to know that how to allow only valid methods in the log.

106.75.137.241 - - [08/Mar/2024:18:11:42 +0000] "{\"method\":\"login\",\"params\":{\"login\":\"aCD4a3KrFCorJHCMqXJUKApSKDV\",\"pass\":\"xxoo\",\"agent\":\"xmr-stak-cpu/1.3.0-1.5.0\"},\"id\":1}\n" 400 5686 "-" "-"106.75.137.241 - - [08/Mar/2024:18:11:43 +0000] "{\"id\":1,\"method\":\"mining.subscribe\",\"params\":[]}\n" 400 5686 "-" "-"106.75.137.241 - - [08/Mar/2024:18:11:44 +0000] "{\"params\": [\"miner1\", \"password\"], \"id\": 2, \"method\": \"mining.authorize\"}\n" 400 5686 "-" "-"

I tried mod_allowmethods apache module with no hope.