Hi @Kaspar
For the log from the first message - "sshd access denied to mysql.sock", most likely, the source of the error is Plesk's PAM module (sshd loads it during authentication process/session startup). PPPM-7228 correctly identified by @Sebahat.hadzhi . The error appears in audit log...