Nov 01 00:00:01 vps1.example spamd[2001]: spamd: connection from localhost [::1]:50076 to port 783, fd 5
Nov 01 00:00:01 vps1.example spamd[1557]: prefork: child states: I
Nov 01 00:00:01 vps1.example systemd[1]: Started Session 120 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Starting Session 120 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Started Session 119 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Starting Session 119 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Started Session 122 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Starting Session 122 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Started Session 121 of user root.
Nov 01 00:00:01 vps1.example systemd[1]: Starting Session 121 of user root.
Nov 01 00:00:01 vps1.example CROND[12972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Nov 01 00:00:01 vps1.example CROND[12971]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Nov 01 00:00:01 vps1.example CROND[12974]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Nov 01 00:00:01 vps1.example CROND[12973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Nov 01 00:00:01 vps1.example dovecot[1481]: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, s
Nov 01 00:00:02 vps1.example systemd[1]: Stopping ConfigServer Firewall & Security - lfd...
Nov 01 00:00:02 vps1.example systemd[1]: lfd.service: main process exited, code=killed, status=9/KILL
Nov 01 00:00:02 vps1.example systemd[1]: Unit lfd.service entered failed state.
Nov 01 00:00:02 vps1.example systemd[1]: lfd.service failed.
Nov 01 00:00:02 vps1.example systemd[1]: Starting ConfigServer Firewall & Security - lfd...
Nov 01 00:00:02 vps1.example dovecot[1481]: lmtp(13046): Connect from local
Nov 01 00:00:02 vps1.example dovecot[1481]: lmtp(13046): Disconnect from local: Successful quit
Nov 01 00:00:02 vps1.example systemd[1]: Started ConfigServer Firewall & Security - lfd.
Nov 01 00:00:03 vps1.example dovecot[1481]: imap-login: Login: user=<__cpanel__service__auth__imap___usey8m4bx5uikahkeep1jutfroxcu70cljw2t1p8sdikg...
Nov 01 00:00:03 vps1.example dovecot[1481]: imap(__cpanel__service__auth__imap___usey8m4bx5uikahkeep1jutfroxcu70cljw2t1p8sdikggitv0q0ampdff_9jf2): Lo
Nov 01 00:00:03 vps1.example pure-ftpd[13094]: ([email protected]) [INFO] New connection from 127.0.0.1
Nov 01 00:00:03 vps1.example pure-ftpd[13094]: ([email protected]) [INFO] __cpanel__service__auth__ftpd__1KoC4ys6AkzqBGdTrq20bb7lfqphlCY3PnsNn3fqTPGUnvxMYb
Nov 01 00:00:03 vps1.example pure-ftpd[13094]: (__cpanel__service__auth__ftpd__1[email protected]127.0
Nov 01 00:00:18 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80
Nov 01 00:00:57 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80
Nov 01 00:01:01 vps1.example systemd[1]: Started Session 123 of user root.
Nov 01 00:01:01 vps1.example systemd[1]: Starting Session 123 of user root.
Nov 01 00:01:01 vps1.example CROND[13175]: (root) CMD (run-parts /etc/cron.hourly)
Nov 01 00:01:01 vps1.example run-parts(/etc/cron.hourly)[13178]: starting 0anacron
Nov 01 00:01:01 vps1.example anacron[13184]: Anacron started on 2018-11-01
Nov 01 00:01:01 vps1.example run-parts(/etc/cron.hourly)[13186]: finished 0anacron
Nov 01 00:01:01 vps1.example anacron[13184]: Normal exit (0 jobs run)
Nov 01 00:01:17 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=8
Nov 01 00:02:11 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80
Nov 01 00:02:41 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80
Nov 01 00:03:09 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80.8
Nov 01 00:03:11 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80.
Nov 01 00:03:47 vps1.example kernel: Firewall: *TCP_IN Blocked* IN=ens192 OUT= MAC=00:50:56:ab:2b:90:ec:30:91:e3:eb:80:08:00 SRC=removedIP DST=80.