Michael Ayeif you have lots of #kswapd0 processes taking up CPU time, but your SWAP is actually empty, it's most likely a #cryptobot that somehow got access to your machine. Look for #rsync processes that you don't know about. Example scenario here: https://nitifilter.com/en/ive-been-hacked/
I've been hacked
This week-end, our server ( VPS @OVH ) has been hacked ( brute force root login ). I noticed that I was unable to log in through ssh as usual ( using RSA or ED25519 keys ) but need a password. After successfully logging in, I found out that my authorized_keys file has been change […]