• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

Question fail2ban-server and systemd-logind high cpu usage, log file auth.log 200Gb

bendim

New Pleskian
Server operating system version
Debian
Plesk version and microupdate number
18.0.48
Hello,
today i checked my grafana board and saw high cup usage and my 500Gb disk space was full.

htop shows fail2ban-server and systemd-logind 100% usage.
I searched for big files with the following command.
Bash:
find / -type f -size +100M -exec du -h {} + 2>/dev/null | sort -r -h
259G    /var/log/auth.log
144G    /var/log/daemon.log
39G    /var/log/syslog.1
18G    /var/log/syslog

I stoped the fail2ban service temporarily to solve the problem.
Was my server hacked or is someone trying to hack it, or is it "only" a plesk problem.

Debian with Plesk Obsidian 18.0.48
 
Very similar to an attack on your server. I think it would be worth examining the fail2ban logs, for example, to get more details.
 
Back
Top