Scale up as you grow — whether you're running one virtual machine or ten thousand.

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.

This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
It could be anything. It’s could be logrotate cleaning up and compressing old logs, iptables writing logs, denyhosts writing logs, and a ton of other stuff. If it’s a small spike, there’s probably nothing to worry about.
Oh I checked the auth.log and found all kinds of strange activity. Someone creating user accounts and settings etc. I just wish I knew how it was hacked. I disabled root ssh, changed ssh port, installed denyHost. guess I got a lot to learn ahead of me
<blockquote>Someone creating user accounts and settings etc</blockquote>Can you pastebin the lines from auth.log that show that? It could be bots trying to brute force into your droplet, denyhosts should help mitigate that.