Question fail2ban-server and systemd-logind high cpu usage, log file auth.log 200Gb

[bendim]

Server operating system version

Debian

Plesk version and microupdate number

18.0.48

Hello,
today i checked my grafana board and saw high cup usage and my 500Gb disk space was full.

htop shows fail2ban-server and systemd-logind 100% usage.
I searched for big files with the following command.

find / -type f -size +100M -exec du -h {} + 2>/dev/null | sort -r -h
259G    /var/log/auth.log
144G    /var/log/daemon.log
39G    /var/log/syslog.1
18G    /var/log/syslog

I stoped the fail2ban service temporarily to solve the problem.
Was my server hacked or is someone trying to hack it, or is it "only" a plesk problem.

Debian with Plesk Obsidian 18.0.48

 

[IgorG]

Very similar to an attack on your server. I think it would be worth examining the fail2ban logs, for example, to get more details.