To blacklist a module, you have to add the following line to the specified configuration file in the
/etc/modprobe.d/ directory as root:
blacklist <module_name>
where <module_name> is the name of the module being blacklisted.
You can modify the /etc/modprobe.d/blacklist.conf file that already exists on the system by default. However, the preferred method is to create a separate configuration file,
/etc/modprobe.d/<module_name>.conf, that will contain settings specific only to the given kernel module.
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/blacklisting_a_module

https://linuxhint.com/list-usb-devices-linux/

iostat shows high disk write rate to sda
sar shows high iowait percentages (higher than user percentages)
free shows most RAM is used for buffers/cache which indicates high utilisation as data is read from or written to disk.

The administrator should set PermitRootLogin to no in the /etc/ssh/sshd_config file to remove the possibility of remote administrative login via the SSH service. The PermitRootLogin directive controls whether the root user can log in using SSH. Setting it to no will deny any remote login attempts by the root user. This will harden the server and prevent unauthorized access. The administrator should also restart the sshd service after making the change.