DIAGNÓSTICO VPS - 2026-11-10 18:55:13 UTC Host: ubuntu (El resumen con el DIAGNÓSTICO está al FINAL del archivo) ############################################################ ### 1. SISTEMA ############################################################ $ cat /etc/os-release | grep -E '^(PRETTY_NAME|VERSION)=' PRETTY_NAME="Ubuntu 24.04.1 LTS" VERSION="24.04.1 LTS (Noble Numbat)" $ uname -a Linux ubuntu 6.8.0-147-generic #147-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 24 11:33:16 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux $ uptime 18:55:13 up 29 min, 1 user, load average: 0.01, 0.00, 0.00 $ nproc 1 $ systemd-detect-virt kvm $ cat /proc/cpuinfo | grep -m1 'model name' model name : AMD EPYC-Milan Processor ############################################################ ### 2. MEMORIA ############################################################ $ free -h total used free shared buff/cache available Mem: 848Mi 573Mi 66Mi 1.0Mi 347Mi 275Mi Swap: 0B 0B 0B $ swapon --show $ cat /proc/meminfo MemTotal: 868904 kB MemFree: 67764 kB MemAvailable: 282188 kB Buffers: 17980 kB Cached: 308028 kB SwapCached: 0 kB Active: 212848 kB Inactive: 401976 kB Active(anon): 88776 kB Inactive(anon): 209836 kB Active(file): 124072 kB Inactive(file): 192140 kB Unevictable: 27292 kB Mlocked: 27292 kB SwapTotal: 0 kB SwapFree: 0 kB Zswap: 0 kB Zswapped: 0 kB Dirty: 124 kB Writeback: 0 kB AnonPages: 316108 kB Mapped: 173536 kB Shmem: 1036 kB KReclaimable: 29632 kB Slab: 93036 kB SReclaimable: 29632 kB SUnreclaim: 63404 kB KernelStack: 6332 kB PageTables: 12892 kB SecPageTables: 0 kB NFS_Unstable: 0 kB Bounce: 0 kB WritebackTmp: 0 kB CommitLimit: 434452 kB Committed_AS: 1510620 kB VmallocTotal: 34359738367 kB VmallocUsed: 17592 kB VmallocChunk: 0 kB Percpu: 65536 kB HardwareCorrupted: 0 kB AnonHugePages: 0 kB ShmemHugePages: 0 kB ShmemPmdMapped: 0 kB FileHugePages: 0 kB FilePmdMapped: 0 kB Unaccepted: 0 kB HugePages_Total: 0 HugePages_Free: 0 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB Hugetlb: 0 kB DirectMap4k: 100200 kB DirectMap2M: 948224 kB DirectMap1G: 0 kB $ sysctl vm.swappiness vm.overcommit_memory vm.overcommit_ratio vm.min_free_kbytes vm.swappiness = 60 vm.overcommit_memory = 0 vm.overcommit_ratio = 50 vm.min_free_kbytes = 41208 $ cat /proc/pressure/memory some avg10=0.00 avg60=0.00 avg300=0.00 total=553572 full avg10=0.00 avg60=0.00 avg300=0.00 total=108029 $ df -h -t tmpfs -t devtmpfs Filesystem Size Used Avail Use% Mounted on tmpfs 85M 1020K 84M 2% /run tmpfs 425M 0 425M 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 85M 16K 85M 1% /run/user/0 ############################################################ ### 3. PROCESOS QUE MÁS MEMORIA Y CPU USAN ############################################################ $ ps -eo pid,user,%mem,rss,vsz,%cpu,etime,comm --sort=-rss | head -25 PID USER %MEM RSS VSZ %CPU ELAPSED COMMAND 1023 root 10.0 87700 1076272 0.1 28:47 node /var/www/g 976 root 9.1 79648 1061244 0.2 28:47 node /var/www/g 979 root 8.0 69848 1051588 0.1 28:47 node /var/www/c 894 root 8.0 69768 1052344 0.2 28:48 PM2 v5.4.3: God 1043 root 8.0 69760 1116356 0.1 28:46 node /var/www/g 991 root 7.9 68936 1051736 0.1 28:47 node /var/www/g 1009 root 7.8 68552 1050736 0.1 28:47 node /var/www/g 1038 root 7.8 68488 1050680 0.1 28:47 node /var/www/g 1017 root 7.8 68320 1050588 0.1 28:47 node /var/www/g 999 root 7.8 68288 1050568 0.1 28:47 node /var/www/g 672 root 7.1 61804 1015572 0.0 28:52 MainThread 673 www-data 6.9 59984 1014664 0.0 28:52 MainThread 675 caddy 5.8 50624 1311632 0.0 28:52 caddy 713 root 4.1 36208 1290076 0.0 28:51 tailscaled 327 root 3.1 27300 288960 0.0 28:59 multipathd 794 root 2.1 19048 110032 0.0 28:50 unattended-upgr 1 root 1.5 13368 22208 0.1 29:05 systemd 484 systemd+ 1.4 12580 21468 0.0 28:57 systemd-resolve 280 root 1.4 12384 34136 0.0 29:00 systemd-journal 714 root 1.4 12260 468944 0.0 28:51 udisksd 840 root 1.3 12104 392096 0.0 28:49 ModemManager 1151 root 1.2 11248 20108 0.0 13:01 systemd 1146 root 1.2 10840 14944 0.0 13:10 sshd 653 systemd+ 1.1 9564 22428 0.0 28:55 systemd-network $ ps -eo pid,user,%cpu,%mem,etime,comm --sort=-%cpu | head -15 PID USER %CPU %MEM ELAPSED COMMAND 894 root 0.2 8.0 28:48 PM2 v5.4.3: God 976 root 0.2 9.1 28:47 node /var/www/g 1023 root 0.1 10.0 28:47 node /var/www/g 1 root 0.1 1.5 29:05 systemd 1043 root 0.1 8.0 28:46 node /var/www/g 1009 root 0.1 7.8 28:47 node /var/www/g 999 root 0.1 7.8 28:47 node /var/www/g 979 root 0.1 8.0 28:47 node /var/www/c 1017 root 0.1 7.8 28:47 node /var/www/g 991 root 0.1 7.9 28:47 node /var/www/g 1038 root 0.1 7.8 28:47 node /var/www/g 1146 root 0.0 1.2 13:10 sshd 713 root 0.0 4.1 28:51 tailscaled 675 caddy 0.0 5.8 28:52 caddy --- Memoria agregada por nombre de proceso (RSS total) --- 634.3 MB 9 procs node 118.9 MB 2 procs MainThread 68.1 MB 1 procs PM2 49.4 MB 1 procs caddy 35.4 MB 1 procs tailscaled 26.7 MB 1 procs multipathd 24.0 MB 2 procs systemd 18.6 MB 1 procs unattended-upgr 18.5 MB 2 procs sshd 13.2 MB 3 procs bash 12.3 MB 1 procs systemd-resolve 12.1 MB 1 procs systemd-journal 12.0 MB 1 procs udisksd 11.8 MB 1 procs ModemManager 9.4 MB 2 procs sudo --- Memoria por servicio (cgroups) --- / 269 - 573.8M - - system.slice 185 - 547.1M - - system.slice/pm2-root.service 110 - 247.2M - - user.slice 12 - 105.6M - - user.slice/user-0.slice 12 - 105.6M - - system.slice/api_djpresidium.service 7 - 65.0M - - system.slice/caddy.service 13 - 56.5M - - system.slice/tailscaled.service 9 - 38.8M - - system.slice/multipathd.service 7 - 21.7M - - system.slice/api_patitoamor.service 7 - 13.1M - - system.slice/systemd-udevd.service 1 - 10.3M - - system.slice/unattended-upgrades.service 2 - 9.7M - - system.slice/systemd-journald.service 1 - 8.1M - - system.slice/udisks2.service 6 - 7.1M - - system.slice/ModemManager.service 4 - 6.7M - - system.slice/systemd-resolved.service 1 - 6.6M - - system.slice/ssh.service 1 - 5.3M - - init.scope 1 - 4.3M - - system.slice/polkit.service 4 - 3.2M - - system.slice/systemd-networkd.service 1 - 2.6M - - system.slice/rsyslog.service 4 - 2.6M - - system.slice/systemd-logind.service 1 - 1.8M - - system.slice/systemd-timesyncd.service 2 - 1.5M - - system.slice/dbus.service 1 - 1.5M - - system.slice/system-serial\x2dgetty.slice 1 - 560.0K - - Número total de procesos: 115 ############################################################ ### 4. EVENTOS OOM (FALTA DE MEMORIA) ############################################################ Fuente del log del kernel: /var/log/kern.log (13113 líneas, desde: 2026-11-02T10:43:24.15111) Número de eventos OOM registrados: 105 --- Procesos matados por el OOM killer (veces) --- 100 fwupd 3 unattended-upgr 2 node /var/www/g --- ¿Quién disparó el OOM? (proceso que pedía memoria) --- 36 /var/www/g 26 fwupd 8 sshd 7 gmain 7 /var/www/c 4 systemd 3 systemd-network 3 systemd-journal 2 systemd-resolve 2 fwupdmgr --- Últimas 25 muertes por OOM --- 2026-11-10T05:41:17.305097+00:00 ubuntu kernel: Out of memory: Killed process 106077 (fwupd) total-vm:340688kB, anon-rss:153144kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:480kB oom_score_adj:0 2026-11-10T06:18:24.706609+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=106171,uid=0 2026-11-10T06:18:24.706609+00:00 ubuntu kernel: Out of memory: Killed process 106171 (fwupd) total-vm:339368kB, anon-rss:150836kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:476kB oom_score_adj:0 2026-11-10T07:02:59.825951+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=106967,uid=0 2026-11-10T07:02:59.825952+00:00 ubuntu kernel: Out of memory: Killed process 106967 (fwupd) total-vm:338972kB, anon-rss:150068kB, file-rss:3712kB, shmem-rss:0kB, UID:0 pgtables:472kB oom_score_adj:0 2026-11-10T08:57:07.792370+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=108109,uid=0 2026-11-10T08:57:07.792370+00:00 ubuntu kernel: Out of memory: Killed process 108109 (fwupd) total-vm:336396kB, anon-rss:144952kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:456kB oom_score_adj:0 2026-11-10T09:51:24.093680+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=108776,uid=0 2026-11-10T09:51:24.093681+00:00 ubuntu kernel: Out of memory: Killed process 108776 (fwupd) total-vm:338444kB, anon-rss:147764kB, file-rss:3712kB, shmem-rss:0kB, UID:0 pgtables:468kB oom_score_adj:0 2026-11-10T10:06:53.390578+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=109209,uid=0 2026-11-10T10:06:53.390579+00:00 ubuntu kernel: Out of memory: Killed process 109209 (fwupd) total-vm:336396kB, anon-rss:140980kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:456kB oom_score_adj:0 2026-11-10T12:02:17.249425+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=112398,uid=0 2026-11-10T12:02:17.249425+00:00 ubuntu kernel: Out of memory: Killed process 112398 (fwupd) total-vm:306532kB, anon-rss:134144kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:432kB oom_score_adj:0 2026-11-10T12:38:59.429194+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=112561,uid=0 2026-11-10T12:38:59.429194+00:00 ubuntu kernel: Out of memory: Killed process 112561 (fwupd) total-vm:305476kB, anon-rss:133120kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:432kB oom_score_adj:0 2026-11-10T13:25:11.743463+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=112697,uid=0 2026-11-10T13:25:11.743465+00:00 ubuntu kernel: Out of memory: Killed process 112697 (fwupd) total-vm:305212kB, anon-rss:132736kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:432kB oom_score_adj:0 2026-11-10T14:02:14.807052+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=112774,uid=0 2026-11-10T14:02:14.807053+00:00 ubuntu kernel: Out of memory: Killed process 112774 (fwupd) total-vm:307456kB, anon-rss:135040kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:440kB oom_score_adj:0 2026-11-10T15:27:51.895610+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=112867,uid=0 2026-11-10T15:27:51.895610+00:00 ubuntu kernel: Out of memory: Killed process 112867 (fwupd) total-vm:327324kB, anon-rss:138036kB, file-rss:3712kB, shmem-rss:0kB, UID:0 pgtables:444kB oom_score_adj:0 2026-11-10T16:19:08.451062+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=112944,uid=0 2026-11-10T16:19:08.451063+00:00 ubuntu kernel: Out of memory: Killed process 112944 (fwupd) total-vm:307192kB, anon-rss:134784kB, file-rss:3584kB, shmem-rss:0kB, UID:0 pgtables:448kB oom_score_adj:0 2026-11-10T17:26:20.447201+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=113020,uid=0 2026-11-10T17:26:20.447201+00:00 ubuntu kernel: Out of memory: Killed process 113020 (fwupd) total-vm:327852kB, anon-rss:139064kB, file-rss:3712kB, shmem-rss:0kB, UID:0 pgtables:444kB oom_score_adj:0 --- INFORME COMPLETO DEL ÚLTIMO OOM --- 2026-11-10T17:26:20.434470+00:00 ubuntu kernel: gmain invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 2026-11-10T17:26:20.444606+00:00 ubuntu kernel: CPU: 0 PID: 45580 Comm: gmain Not tainted 6.8.0-147-generic #147-Ubuntu 2026-11-10T17:26:20.444609+00:00 ubuntu kernel: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 2026-11-10T17:26:20.444609+00:00 ubuntu kernel: Call Trace: 2026-11-10T17:26:20.444610+00:00 ubuntu kernel: 2026-11-10T17:26:20.444610+00:00 ubuntu kernel: dump_stack_lvl+0x76/0xa0 2026-11-10T17:26:20.444610+00:00 ubuntu kernel: dump_stack+0x10/0x20 2026-11-10T17:26:20.444612+00:00 ubuntu kernel: dump_header+0x49/0x210 2026-11-10T17:26:20.444612+00:00 ubuntu kernel: oom_kill_process+0x118/0x280 2026-11-10T17:26:20.444612+00:00 ubuntu kernel: ? srso_alias_return_thunk+0x5/0xfbef5 2026-11-10T17:26:20.444613+00:00 ubuntu kernel: ? oom_evaluate_task+0x143/0x1e0 2026-11-10T17:26:20.444613+00:00 ubuntu kernel: out_of_memory+0x103/0x350 2026-11-10T17:26:20.444613+00:00 ubuntu kernel: __alloc_pages_may_oom+0x10c/0x1d0 2026-11-10T17:26:20.444614+00:00 ubuntu kernel: __alloc_pages_slowpath.constprop.0+0x4d9/0xa70 2026-11-10T17:26:20.444614+00:00 ubuntu kernel: __alloc_pages+0x31f/0x350 2026-11-10T17:26:20.444615+00:00 ubuntu kernel: alloc_pages_mpol+0x91/0x210 2026-11-10T17:26:20.444616+00:00 ubuntu kernel: alloc_pages+0x5b/0xd0 2026-11-10T17:26:20.444617+00:00 ubuntu kernel: folio_alloc+0x15/0x40 2026-11-10T17:26:20.444617+00:00 ubuntu kernel: filemap_alloc_folio+0xf4/0x100 2026-11-10T17:26:20.444617+00:00 ubuntu kernel: __filemap_get_folio+0x199/0x2e0 2026-11-10T17:26:20.444618+00:00 ubuntu kernel: filemap_fault+0x15c/0x8e0 2026-11-10T17:26:20.444618+00:00 ubuntu kernel: ? srso_alias_return_thunk+0x5/0xfbef5 2026-11-10T17:26:20.444619+00:00 ubuntu kernel: __do_fault+0x3d/0x190 2026-11-10T17:26:20.444620+00:00 ubuntu kernel: do_read_fault+0x133/0x200 2026-11-10T17:26:20.444620+00:00 ubuntu kernel: do_fault+0xf0/0x260 2026-11-10T17:26:20.444620+00:00 ubuntu kernel: handle_pte_fault+0x114/0x1d0 2026-11-10T17:26:20.444621+00:00 ubuntu kernel: __handle_mm_fault+0x654/0x790 2026-11-10T17:26:20.444621+00:00 ubuntu kernel: handle_mm_fault+0x18a/0x380 2026-11-10T17:26:20.444622+00:00 ubuntu kernel: do_user_addr_fault+0x169/0x670 2026-11-10T17:26:20.444622+00:00 ubuntu kernel: exc_page_fault+0x83/0x1b0 2026-11-10T17:26:20.444622+00:00 ubuntu kernel: asm_exc_page_fault+0x27/0x30 2026-11-10T17:26:20.444625+00:00 ubuntu kernel: RIP: 0033:0x70c19d031fe2 2026-11-10T17:26:20.444625+00:00 ubuntu kernel: Code: Unable to access opcode bytes at 0x70c19d031fb8. 2026-11-10T17:26:20.444626+00:00 ubuntu kernel: RSP: 002b:000070c19c4cfbb0 EFLAGS: 00010246 2026-11-10T17:26:20.444626+00:00 ubuntu kernel: RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffffffffffffeb8 2026-11-10T17:26:20.444627+00:00 ubuntu kernel: RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000018 2026-11-10T17:26:20.444627+00:00 ubuntu kernel: RBP: 000070c19c4cfbd0 R08: 0000000044a96470 R09: 000070c19ce86380 2026-11-10T17:26:20.444627+00:00 ubuntu kernel: R10: 0000000000000000 R11: 0000000000000206 R12: 0000628fe71ccdc0 2026-11-10T17:26:20.444628+00:00 ubuntu kernel: R13: 0000000000000000 R14: 000070c19d0ba370 R15: 0000628fe71cce10 2026-11-10T17:26:20.444628+00:00 ubuntu kernel: 2026-11-10T17:26:20.444629+00:00 ubuntu kernel: Mem-Info: 2026-11-10T17:26:20.444629+00:00 ubuntu kernel: active_anon:77182 inactive_anon:83297 isolated_anon:0 2026-11-10T17:26:20.444630+00:00 ubuntu kernel: active_file:28 inactive_file:53 isolated_file:0 2026-11-10T17:26:20.444631+00:00 ubuntu kernel: unevictable:6790 dirty:0 writeback:0 2026-11-10T17:26:20.444631+00:00 ubuntu kernel: slab_reclaimable:5696 slab_unreclaimable:15985 2026-11-10T17:26:20.444631+00:00 ubuntu kernel: mapped:2470 shmem:256 pagetables:4511 2026-11-10T17:26:20.444632+00:00 ubuntu kernel: sec_pagetables:0 bounce:0 2026-11-10T17:26:20.444632+00:00 ubuntu kernel: kernel_misc_reclaimable:0 2026-11-10T17:26:20.444633+00:00 ubuntu kernel: free:11018 free_pcp:134 free_cma:0 2026-11-10T17:26:20.444634+00:00 ubuntu kernel: Node 0 active_anon:308728kB inactive_anon:333188kB active_file:112kB inactive_file:212kB unevictable:27160kB isolated(anon):0kB isolated(file):0kB mapped:9880kB dirty:0kB writeback:0kB shmem:1024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6272kB pagetables:18044kB sec_pagetables:0kB all_unreclaimable? no 2026-11-10T17:26:20.444634+00:00 ubuntu kernel: Node 0 DMA free:3928kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:4208kB inactive_anon:5996kB active_file:20kB inactive_file:40kB unevictable:464kB writepending:0kB present:15992kB managed:15360kB mlocked:464kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB 2026-11-10T17:26:20.444635+00:00 ubuntu kernel: lowmem_reserve[]: 0 795 795 795 795 2026-11-10T17:26:20.444635+00:00 ubuntu kernel: Node 0 DMA32 free:40144kB boost:0kB min:40444kB low:50552kB high:60660kB reserved_highatomic:0KB active_anon:304520kB inactive_anon:327192kB active_file:92kB inactive_file:172kB unevictable:26696kB writepending:0kB present:1032040kB managed:853564kB mlocked:26696kB bounce:0kB free_pcp:524kB local_pcp:524kB free_cma:0kB 2026-11-10T17:26:20.444636+00:00 ubuntu kernel: lowmem_reserve[]: 0 0 0 0 0 2026-11-10T17:26:20.444636+00:00 ubuntu kernel: Node 0 DMA: 4*4kB (UME) 9*8kB (UME) 6*16kB (UE) 7*32kB (UE) 1*64kB (U) 1*128kB (U) 1*256kB (U) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 0*4096kB = 3928kB 2026-11-10T17:26:20.444637+00:00 ubuntu kernel: Node 0 DMA32: 52*4kB (UE) 102*8kB (UME) 49*16kB (UME) 98*32kB (ME) 44*64kB (UME) 35*128kB (UME) 33*256kB (UME) 26*512kB (UME) 6*1024kB (UM) 0*2048kB 0*4096kB = 40144kB 2026-11-10T17:26:20.444637+00:00 ubuntu kernel: Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 2026-11-10T17:26:20.444637+00:00 ubuntu kernel: Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2026-11-10T17:26:20.444638+00:00 ubuntu kernel: 2566 total pagecache pages 2026-11-10T17:26:20.444638+00:00 ubuntu kernel: 0 pages in swap cache 2026-11-10T17:26:20.444639+00:00 ubuntu kernel: Free swap = 0kB 2026-11-10T17:26:20.444639+00:00 ubuntu kernel: Total swap = 0kB 2026-11-10T17:26:20.444640+00:00 ubuntu kernel: 262008 pages RAM 2026-11-10T17:26:20.444640+00:00 ubuntu kernel: 0 pages HighMem/MovableOnly 2026-11-10T17:26:20.444640+00:00 ubuntu kernel: 44777 pages reserved 2026-11-10T17:26:20.444641+00:00 ubuntu kernel: 0 pages hwpoisoned 2026-11-10T17:26:20.444641+00:00 ubuntu kernel: Tasks state (memory values in pages): 2026-11-10T17:26:20.444642+00:00 ubuntu kernel: [ pid ] uid tgid total_vm rss rss_anon rss_file rss_shmem pgtables_bytes swapents oom_score_adj name 2026-11-10T17:26:20.444642+00:00 ubuntu kernel: [ 672] 0 672 256592 7273 6665 608 0 1064960 0 0 MainThread 2026-11-10T17:26:20.444643+00:00 ubuntu kernel: [ 673] 33 673 253983 4421 3813 608 0 716800 0 0 MainThread 2026-11-10T17:26:20.444643+00:00 ubuntu kernel: [ 675] 999 675 328100 3895 3863 32 0 237568 0 0 caddy 2026-11-10T17:26:20.444643+00:00 ubuntu kernel: [ 678] 101 678 2491 1152 256 896 0 69632 0 -900 dbus-daemon 2026-11-10T17:26:20.444644+00:00 ubuntu kernel: [ 711] 0 711 4512 1024 256 768 0 73728 0 0 systemd-logind 2026-11-10T17:26:20.444645+00:00 ubuntu kernel: [ 718] 102 718 55629 1379 547 832 0 81920 0 0 rsyslogd 2026-11-10T17:26:20.444645+00:00 ubuntu kernel: [ 745] 0 745 27508 3168 2336 832 0 114688 0 0 unattended-upgr 2026-11-10T17:26:20.444645+00:00 ubuntu kernel: [ 790] 0 790 1538 480 32 448 0 49152 0 0 agetty 2026-11-10T17:26:20.444646+00:00 ubuntu kernel: [ 847] 0 847 1527 448 32 416 0 53248 0 0 agetty 2026-11-10T17:26:20.444646+00:00 ubuntu kernel: [ 892] 0 892 297559 7777 7105 672 0 1126400 0 0 PM2 v5.4.3: God 2026-11-10T17:26:20.444646+00:00 ubuntu kernel: [ 981] 0 981 266512 9408 8768 640 0 1404928 0 0 node /var/www/g 2026-11-10T17:26:20.444647+00:00 ubuntu kernel: [ 991] 0 991 267624 10698 10058 640 0 1511424 0 0 node /var/www/c 2026-11-10T17:26:20.444647+00:00 ubuntu kernel: [ 1002] 0 1002 264977 7784 7176 608 0 1216512 0 0 node /var/www/g 2026-11-10T17:26:20.444647+00:00 ubuntu kernel: [ 1015] 0 1015 269913 13220 12580 640 0 1224704 0 0 node /var/www/g 2026-11-10T17:26:20.444648+00:00 ubuntu kernel: [ 1029] 0 1029 266613 10160 9552 608 0 1323008 0 0 node /var/www/g 2026-11-10T17:26:20.444648+00:00 ubuntu kernel: [ 1030] 0 1030 267271 10240 9600 640 0 1552384 0 0 node /var/www/g 2026-11-10T17:26:20.444649+00:00 ubuntu kernel: [ 1043] 0 1043 2429432 19289 18553 736 0 1601536 0 0 node /var/www/g 2026-11-10T17:26:20.444649+00:00 ubuntu kernel: [ 1045] 0 1045 265699 8506 7866 640 0 1335296 0 0 node /var/www/g 2026-11-10T17:26:20.444649+00:00 ubuntu kernel: [ 18880] 0 18880 322519 2619 2587 32 0 196608 0 0 tailscaled 2026-11-10T17:26:20.444650+00:00 ubuntu kernel: [ 37876] 0 37876 299334 8994 8354 640 0 1458176 0 0 node /var/www/g 2026-11-10T17:26:20.444650+00:00 ubuntu kernel: [ 45524] 0 45524 1807 576 32 544 0 53248 0 0 cron 2026-11-10T17:26:20.444650+00:00 ubuntu kernel: [ 45535] 0 45535 55856 6752 4576 2176 0 114688 0 -1000 multipathd 2026-11-10T17:26:20.444651+00:00 ubuntu kernel: [ 45548] 989 45548 95931 1511 583 928 0 106496 0 0 polkitd 2026-11-10T17:26:20.447084+00:00 ubuntu kernel: [ 45562] 0 45562 3007 832 256 576 0 73728 0 -1000 sshd 2026-11-10T17:26:20.447195+00:00 ubuntu kernel: [ 45567] 991 45567 5360 1280 544 736 0 86016 0 0 systemd-resolve 2026-11-10T17:26:20.447197+00:00 ubuntu kernel: [ 45568] 996 45568 22771 992 224 768 0 77824 0 0 systemd-timesyn 2026-11-10T17:26:20.447198+00:00 ubuntu kernel: [ 45573] 0 45573 117210 1408 512 896 0 139264 0 0 udisksd 2026-11-10T17:26:20.447198+00:00 ubuntu kernel: [ 45579] 0 45579 6279 1024 416 608 0 69632 0 -1000 systemd-udevd 2026-11-10T17:26:20.447199+00:00 ubuntu kernel: [ 45594] 0 45594 98024 1344 512 832 0 131072 0 0 ModemManager 2026-11-10T17:26:20.447199+00:00 ubuntu kernel: [ 45608] 998 45608 4731 1024 288 736 0 73728 0 0 systemd-network 2026-11-10T17:26:20.447200+00:00 ubuntu kernel: [ 112583] 0 112583 8459 1088 256 832 0 86016 0 -250 systemd-journal 2026-11-10T17:26:20.447200+00:00 ubuntu kernel: [ 113015] 990 113015 91352 1280 512 768 0 163840 0 0 fwupdmgr 2026-11-10T17:26:20.447200+00:00 ubuntu kernel: [ 113020] 0 113020 81963 35694 34766 928 0 454656 0 0 fwupd 2026-11-10T17:26:20.447201+00:00 ubuntu kernel: [ 113023] 0 113023 2328 611 99 512 0 57344 0 0 cron 2026-11-10T17:26:20.447201+00:00 ubuntu kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/fwupd.service,task=fwupd,pid=113020,uid=0 2026-11-10T17:26:20.447201+00:00 ubuntu kernel: Out of memory: Killed process 113020 (fwupd) total-vm:327852kB, anon-rss:139064kB, file-rss:3712kB, shmem-rss:0kB, UID:0 pgtables:444kB oom_score_adj:0 --- Memoria por proceso en el momento del último OOM (de la tabla anterior) --- 342.2 MB 8 procs /var/www/g 139.4 MB 1 procs fwupd 45.7 MB 2 procs MainThread 41.8 MB 1 procs /var/www/c 30.4 MB 1 procs God 26.4 MB 1 procs multipathd 15.2 MB 1 procs caddy 12.4 MB 1 procs unattended-upgr 10.2 MB 1 procs tailscaled 5.9 MB 1 procs polkitd 5.5 MB 1 procs udisksd 5.4 MB 1 procs rsyslogd 5.2 MB 1 procs ModemManager 5.0 MB 1 procs systemd-resolve 5.0 MB 1 procs fwupdmgr Suma de RSS de todos los procesos en ese momento: 731 MB (RAM total: 848 MB) ############################################################ ### 5. OTROS ERRORES DEL KERNEL ############################################################ --- Tareas bloqueadas / I/O / allocation failures / soft lockups --- 2026-11-09T12:33:30.933145+00:00 ubuntu kernel: Call Trace: 2026-11-09T13:21:57.129491+00:00 ubuntu kernel: Call Trace: 2026-11-09T14:16:55.091450+00:00 ubuntu kernel: Call Trace: 2026-11-09T15:52:37.496444+00:00 ubuntu kernel: Call Trace: 2026-11-09T16:38:20.197878+00:00 ubuntu kernel: Call Trace: 2026-11-09T17:31:49.283959+00:00 ubuntu kernel: Call Trace: 2026-11-09T18:30:20.437195+00:00 ubuntu kernel: Call Trace: 2026-11-09T19:03:55.598795+00:00 ubuntu kernel: Call Trace: 2026-11-09T20:42:22.086866+00:00 ubuntu kernel: Call Trace: 2026-11-09T21:06:47.932358+00:00 ubuntu kernel: Call Trace: 2026-11-09T22:31:34.394640+00:00 ubuntu kernel: Call Trace: 2026-11-09T23:18:47.310447+00:00 ubuntu kernel: Call Trace: 2026-11-10T00:39:36.051354+00:00 ubuntu kernel: Call Trace: 2026-11-10T01:19:23.429941+00:00 ubuntu kernel: Call Trace: 2026-11-10T02:31:10.307324+00:00 ubuntu kernel: Call Trace: 2026-11-10T03:16:48.500749+00:00 ubuntu kernel: Call Trace: 2026-11-10T04:56:20.588719+00:00 ubuntu kernel: Call Trace: 2026-11-10T05:41:17.303908+00:00 ubuntu kernel: Call Trace: 2026-11-10T06:18:24.704848+00:00 ubuntu kernel: Call Trace: 2026-11-10T07:02:59.821741+00:00 ubuntu kernel: Call Trace: 2026-11-10T08:57:07.789747+00:00 ubuntu kernel: Call Trace: 2026-11-10T09:51:24.044589+00:00 ubuntu kernel: Call Trace: 2026-11-10T10:06:53.390369+00:00 ubuntu kernel: Call Trace: 2026-11-10T12:02:17.249332+00:00 ubuntu kernel: Call Trace: 2026-11-10T12:38:59.424377+00:00 ubuntu kernel: Call Trace: 2026-11-10T13:25:11.743387+00:00 ubuntu kernel: Call Trace: 2026-11-10T14:02:14.804808+00:00 ubuntu kernel: Call Trace: 2026-11-10T15:27:51.892895+00:00 ubuntu kernel: Call Trace: 2026-11-10T16:19:08.449434+00:00 ubuntu kernel: Call Trace: 2026-11-10T17:26:20.444609+00:00 ubuntu kernel: Call Trace: --- Red en el kernel (enlaces caídos, conntrack lleno, etc.) --- ############################################################ ### 6. REINICIOS Y PERSISTENCIA DE LOGS ############################################################ Journal persistente: SÍ (/var/log/journal existe) $ journalctl --list-boots --no-pager | tail -15 IDX BOOT ID FIRST ENTRY LAST ENTRY -2 a831da24c10748dcb54f8c7ae9492ced Fri 2026-10-09 20:03:50 UTC Wed 2026-11-04 07:43:34 UTC -1 041d657798f44163aa912fdf93ea57f5 Wed 2026-11-04 07:43:48 UTC Tue 2026-11-10 18:25:55 UTC 0 75748d9690024b4996de1183183cb88c Tue 2026-11-10 18:26:12 UTC Tue 2026-11-10 18:55:13 UTC $ last -x reboot shutdown | head -15 reboot system boot 6.8.0-147-generi Tue Nov 10 18:26 still running shutdown system down 6.8.0-147-generi Tue Nov 10 18:25 - 18:26 (00:00) reboot system boot 6.8.0-147-generi Wed Nov 4 07:43 - 18:25 (6+10:42) shutdown system down 6.8.0-139-generi Wed Nov 4 07:43 - 07:43 (00:00) reboot system boot 6.8.0-139-generi Tue Sep 15 21:05 - 07:43 (49+10:38) shutdown system down 6.8.0-139-generi Tue Sep 15 21:05 - 21:05 (00:00) reboot system boot 6.8.0-139-generi Tue Sep 15 20:34 - 21:05 (00:30) shutdown system down 6.8.0-124-generi Tue Sep 15 20:34 - 20:34 (00:00) reboot system boot 6.8.0-124-generi Sat Jun 20 19:51 - 20:34 (87+00:43) shutdown system down 6.8.0-101-generi Sat Jun 20 19:51 - 19:51 (00:00) reboot system boot 6.8.0-101-generi Wed Mar 11 09:40 - 19:51 (101+10:11) reboot system boot 6.8.0-101-generi Wed Mar 11 09:37 - 19:51 (101+10:14) reboot system boot 6.8.0-55-generic Tue Mar 11 16:29 - 19:51 (466+03:21) shutdown system down 6.8.0-51-generic Tue Mar 11 16:29 - 16:29 (00:00) reboot system boot 6.8.0-51-generic Tue Mar 11 00:18 - 16:29 (16:10) $ journalctl --disk-usage Archived and active journals take up 875.0M in the file system. ############################################################ ### 7. CPU, CARGA Y STEAL (host de IONOS sobrecargado) ############################################################ $ cat /proc/loadavg 0.01 0.00 0.00 1/269 1536 $ vmstat 1 6 procs -----------memory---------- ---swap-- -----io---- -system-- -------cpu------- r b swpd free buff cache si so bi bo in cs us sy id wa st gu 2 0 0 66592 10996 348860 0 0 321 17 149 1 2 1 97 0 0 0 0 0 0 66368 10996 348920 0 0 0 0 244 198 2 3 95 0 0 0 0 0 0 66368 10996 348920 0 0 0 0 182 175 1 1 98 0 0 0 0 0 0 66368 10996 348920 0 0 0 0 110 122 2 0 98 0 0 0 0 0 0 66368 10996 348920 0 0 0 0 105 118 1 0 99 0 0 0 0 0 0 66368 10996 348920 0 0 0 124 135 151 2 0 98 0 0 0 Steal medio: 0% | I/O wait medio: 0% | swap in+out: 0 KB/s ############################################################ ### 8. DISCO ############################################################ $ df -hT -x tmpfs -x devtmpfs -x squashfs -x overlay Filesystem Type Size Used Avail Use% Mounted on /dev/vda1 ext4 8.7G 5.2G 3.5G 60% / /dev/vda16 ext4 881M 117M 703M 15% /boot /dev/vda15 vfat 105M 6.1M 99M 6% /boot/efi $ df -i -x tmpfs -x devtmpfs -x squashfs -x overlay Filesystem Inodes IUsed IFree IUse% Mounted on /dev/vda1 1179648 163879 1015769 14% / /dev/vda16 58496 604 57892 2% /boot /dev/vda15 0 0 0 - /boot/efi $ du -xsh /var/log /var/lib/docker /tmp /var/tmp 2>/dev/null 1.2G /var/log 3.5M /tmp 56K /var/tmp ############################################################ ### 9. RED ############################################################ $ ip -br addr lo UNKNOWN 127.0.0.1/8 ::1/128 ens6 UP 82.165.173.200/32 metric 100 fe80::1:8dff:fe86:3e87/64 tailscale0 UNKNOWN 100.126.71.74/32 fd7a:115c:a1e0::201:47fc/128 fe80::d1b7:4d86:8275:408d/64 $ ip route default via 82.165.173.1 dev ens6 proto dhcp src 82.165.173.200 metric 100 82.165.173.1 dev ens6 proto dhcp scope link src 82.165.173.200 metric 100 prohibit 169.254.169.254 212.227.123.16 via 82.165.173.1 dev ens6 proto dhcp src 82.165.173.200 metric 100 212.227.123.17 via 82.165.173.1 dev ens6 proto dhcp src 82.165.173.200 metric 100 $ cat /etc/resolv.conf | grep -v '^#' nameserver 127.0.0.53 options edns0 trust-ad search . $ ping -c 3 -W 2 82.165.173.1 PING 82.165.173.1 (82.165.173.1) 56(84) bytes of data. 64 bytes from 82.165.173.1: icmp_seq=1 ttl=64 time=0.394 ms 64 bytes from 82.165.173.1: icmp_seq=2 ttl=64 time=0.163 ms 64 bytes from 82.165.173.1: icmp_seq=3 ttl=64 time=0.097 ms --- 82.165.173.1 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2066ms rtt min/avg/max/mdev = 0.097/0.218/0.394/0.127 ms $ ping -c 3 -W 2 1.1.1.1 PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data. 64 bytes from 1.1.1.1: icmp_seq=1 ttl=57 time=10.2 ms 64 bytes from 1.1.1.1: icmp_seq=2 ttl=57 time=10.3 ms 64 bytes from 1.1.1.1: icmp_seq=3 ttl=57 time=10.3 ms --- 1.1.1.1 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 10.175/10.253/10.304/0.056 ms $ getent hosts ionos.es 217.160.86.51 ionos.es 217.160.86.49 ionos.es $ ss -s Total: 269 TCP: 24 (estab 4, closed 0, orphaned 0, timewait 0) Transport Total IP IPv6 RAW 1 0 1 UDP 6 4 2 TCP 24 16 8 INET 31 20 11 FRAG 0 0 0 $ ss -tulpn Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=484,fd=16)) udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=484,fd=14)) udp UNCONN 0 0 82.165.173.200%ens6:68 0.0.0.0:* users:(("systemd-network",pid=653,fd=11)) udp UNCONN 0 0 0.0.0.0:41641 0.0.0.0:* users:(("tailscaled",pid=713,fd=19)) udp UNCONN 0 0 *:443 *:* users:(("caddy",pid=675,fd=7)) udp UNCONN 0 0 [::]:41641 [::]:* users:(("tailscaled",pid=713,fd=18)) tcp LISTEN 0 511 0.0.0.0:4823 0.0.0.0:* users:(("node /var/www/g",pid=1043,fd=26)) tcp LISTEN 0 511 0.0.0.0:1104 0.0.0.0:* users:(("node /var/www/g",pid=1023,fd=23)) tcp LISTEN 0 511 0.0.0.0:7778 0.0.0.0:* users:(("node /var/www/g",pid=976,fd=23)) tcp LISTEN 0 4096 100.126.71.74%tailscale0:60676 0.0.0.0:* users:(("tailscaled",pid=713,fd=21)) tcp LISTEN 0 4096 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=815,fd=3),("systemd",pid=1,fd=91)) tcp LISTEN 0 511 0.0.0.0:2023 0.0.0.0:* users:(("node /var/www/g",pid=1009,fd=23)) tcp LISTEN 0 511 0.0.0.0:2026 0.0.0.0:* users:(("node /var/www/g",pid=1017,fd=23)) tcp LISTEN 0 511 0.0.0.0:3576 0.0.0.0:* users:(("node /var/www/g",pid=999,fd=23)) tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=484,fd=17)) tcp LISTEN 0 4096 127.0.0.1:2019 0.0.0.0:* users:(("caddy",pid=675,fd=3)) tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=484,fd=15)) tcp LISTEN 0 511 0.0.0.0:4918 0.0.0.0:* users:(("node /var/www/g",pid=1038,fd=23)) tcp LISTEN 0 4096 [fd7a:115c:a1e0::201:47fc]%tailscale0:54480 [::]:* users:(("tailscaled",pid=713,fd=23)) tcp LISTEN 0 4096 *:80 *:* users:(("caddy",pid=675,fd=8)) tcp LISTEN 0 4096 [::]:22 [::]:* users:(("sshd",pid=815,fd=4),("systemd",pid=1,fd=92)) tcp LISTEN 0 511 *:4625 *:* users:(("MainThread",pid=673,fd=21)) tcp LISTEN 0 4096 *:443 *:* users:(("caddy",pid=675,fd=6)) tcp LISTEN 0 511 *:5455 *:* users:(("node /var/www/g",pid=991,fd=23)) tcp LISTEN 0 511 *:7001 *:* users:(("node /var/www/c",pid=979,fd=23)) tcp LISTEN 0 511 *:3333 *:* users:(("MainThread",pid=672,fd=21)) --- IPs con más conexiones TCP establecidas --- 1 46.25.135.161 1 45.159.97.233 1 199.165.136.101 1 192.200.0.112 Conntrack: 52 / 7168 $ journalctl --no-pager --since '7 days ago' -u systemd-networkd -u networking -u NetworkManager -p warning | tail -20 Nov 10 13:22:07 ubuntu systemd-networkd[45608]: ens6: Could not set DHCPv4 address: Connection timed out Nov 10 13:22:08 ubuntu systemd-networkd[45608]: ens6: Failed ############################################################ ### 10. SSH Y SEGURIDAD ############################################################ Intentos SSH fallidos (últimas 24h aprox.): 15747 --- IPs con más intentos fallidos --- 2391 109.160.32.160 1921 109.160.32.157 1002 77.239.124.78 1002 77.239.124.46 1000 77.239.124.31 999 77.239.124.74 176 92.118.39.71 168 116.110.222.102 167 171.231.194.225 90 2.57.121.112 --- Últimos accesos correctos --- Nov 10 18:42:11 ubuntu sshd[1146]: Accepted password for root from 46.25.135.161 port 59457 ssh2 $ last -n 10 -w | grep -v reboot root pts/0 46.25.135.161 Tue Nov 10 18:42 still logged in root pts/0 81.36.188.196 Fri Nov 6 00:13 - 00:20 (00:07) root pts/0 176.87.100.221 Wed Nov 4 07:51 - 07:51 (00:00) root pts/0 81.36.188.196 Mon Nov 2 22:21 - 22:28 (00:07) root pts/0 79.117.178.95 Mon Nov 2 12:40 - 13:19 (00:38) root pts/1 81.36.182.81 Mon Nov 2 11:11 - 11:11 (00:00) root pts/1 81.36.182.81 Mon Nov 2 11:08 - 11:08 (00:00) root pts/1 81.36.182.81 Mon Nov 2 11:07 - 11:07 (00:00) wtmp begins Mon Mar 10 16:11:06 2025 Procesos sshd ahora mismo: 2 $ sshd -T 2>/dev/null | grep -Ei '^(port|permitrootlogin|passwordauthentication|maxstartups|maxauthtries) ' port 22 maxauthtries 6 permitrootlogin yes passwordauthentication yes maxstartups 10:30:100 $ ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To Action From -- ------ ---- 80/tcp (Apache) ALLOW IN Anywhere 443 ALLOW IN Anywhere 443/tcp ALLOW IN Anywhere 80 ALLOW IN Anywhere 3333 ALLOW IN Anywhere 22 ALLOW IN Anywhere 4545/tcp DENY IN Anywhere 4545 DENY IN Anywhere 7412 DENY IN Anywhere 5455/tcp DENY IN Anywhere 80/tcp (Apache (v6)) ALLOW IN Anywhere (v6) 443 (v6) ALLOW IN Anywhere (v6) 443/tcp (v6) ALLOW IN Anywhere (v6) 80 (v6) ALLOW IN Anywhere (v6) 3333 (v6) ALLOW IN Anywhere (v6) 22 (v6) ALLOW IN Anywhere (v6) 4545/tcp (v6) DENY IN Anywhere (v6) 4545 (v6) DENY IN Anywhere (v6) 7412 (v6) DENY IN Anywhere (v6) 5455/tcp (v6) DENY IN Anywhere (v6) $ iptables -S 2>/dev/null | head -40; nft list ruleset 2>/dev/null | head -40 -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT -N ts-forward -N ts-input -N ufw-after-forward -N ufw-after-input -N ufw-after-logging-forward -N ufw-after-logging-input -N ufw-after-logging-output -N ufw-after-output -N ufw-before-forward -N ufw-before-input -N ufw-before-logging-forward -N ufw-before-logging-input -N ufw-before-logging-output -N ufw-before-output -N ufw-logging-allow -N ufw-logging-deny -N ufw-not-local -N ufw-reject-forward -N ufw-reject-input -N ufw-reject-output -N ufw-skip-to-policy-forward -N ufw-skip-to-policy-input -N ufw-skip-to-policy-output -N ufw-track-forward -N ufw-track-input -N ufw-track-output -N ufw-user-forward -N ufw-user-input -N ufw-user-limit -N ufw-user-limit-accept -N ufw-user-logging-forward -N ufw-user-logging-input -N ufw-user-logging-output -N ufw-user-output -A INPUT -j ts-input -A INPUT -j ufw-before-logging-input -A INPUT -j ufw-before-input table ip filter { chain ufw-before-logging-input { } chain ufw-before-logging-output { } chain ufw-before-logging-forward { } chain ufw-before-input { iifname "lo" counter packets 1004 bytes 3330422 accept ct state related,established counter packets 9069 bytes 1172545 accept ct state invalid counter packets 5 bytes 200 jump ufw-logging-deny ct state invalid counter packets 5 bytes 200 drop ip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept ip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept ip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept ip protocol icmp icmp type echo-request counter packets 0 bytes 0 accept udp sport 67 udp dport 68 counter packets 0 bytes 0 accept counter packets 549 bytes 22676 jump ufw-not-local ip daddr 224.0.0.251 udp dport 5353 counter packets 0 bytes 0 accept ip daddr 239.255.255.250 udp dport 1900 counter packets 0 bytes 0 accept counter packets 549 bytes 22676 jump ufw-user-input } chain ufw-before-output { oifname "lo" counter packets 1004 bytes 3330422 accept ct state related,established counter packets 10769 bytes 3936396 accept counter packets 111 bytes 9101 jump ufw-user-output } chain ufw-before-forward { ct state related,established counter packets 0 bytes 0 accept ip protocol icmp icmp type destination-unreachable counter packets 0 bytes 0 accept ip protocol icmp icmp type time-exceeded counter packets 0 bytes 0 accept ip protocol icmp icmp type parameter-problem counter packets 0 bytes 0 accept ip protocol icmp icmp type echo-request counter packets 0 bytes 0 accept counter packets 0 bytes 0 jump ufw-user-forward } --- Ejecutables lanzados desde rutas sospechosas (/tmp, /dev/shm, /var/tmp) --- --- Procesos con >50% CPU --- PID USER %CPU ELAPSED COMMAND --- Tareas programadas --- $ crontab -l -u root no crontab for root $ ls -la /etc/cron.d /var/spool/cron/crontabs 2>/dev/null /etc/cron.d: total 20 drwxr-xr-x 2 root root 4096 Mar 10 2025 . drwxr-xr-x 114 root root 4096 Nov 6 06:18 .. -rw-r--r-- 1 root root 102 Mar 31 2024 .placeholder -rw-r--r-- 1 root root 201 Apr 8 2024 e2scrub_all -rw-r--r-- 1 root root 396 Jan 9 2024 sysstat /var/spool/cron/crontabs: total 8 drwx-wx--T 2 root crontab 4096 Mar 31 2024 . drwxr-xr-x 3 root root 4096 Jan 15 2025 .. ############################################################ ### 11. SERVICIOS ############################################################ $ systemctl --failed --no-pager UNIT LOAD ACTIVE SUB DESCRIPTION 0 loaded units listed. --- Servicios que se reinician solos (últimos 7 días) --- 100 fwupd.service: Main process exited 100 fwupd-refresh.service: Main process exited 100 fwupd-refresh.service: Failed with result 'exit-code'. 97 fwupd.service: Failed with result 'signal'. 3 tailscaled.service: Scheduled restart job 2 tailscaled.service: Failed with result 'timeout'. 2 fwupd.service: Failed with result 'timeout'. 1 tailscaled.service: Main process exited 1 tailscaled.service: Failed with result 'exit-code'. 1 systemd-journald.service: Scheduled restart job 1 systemd-journald.service: Main process exited 1 systemd-journald.service: Failed with result 'watchdog'. 1 fwupd.service: Failed with result 'oom-kill'. 1 apt-daily-upgrade.service: Main process exited 1 apt-daily-upgrade.service: Failed with result 'oom-kill'. $ systemctl list-units --type=service --state=running --no-pager --no-legend | awk '{print $1}' api_djpresidium.service api_patitoamor.service caddy.service cron.service dbus.service getty@tty1.service ModemManager.service multipathd.service pm2-root.service polkit.service rsyslog.service serial-getty@ttyS0.service ssh.service systemd-journald.service systemd-logind.service systemd-networkd.service systemd-resolved.service systemd-timesyncd.service systemd-udevd.service tailscaled.service udisks2.service unattended-upgrades.service user@0.service --- fwupd --- $ systemctl status fwupd --no-pager | head -5; systemctl is-enabled fwupd-refresh.timer 2>/dev/null * fwupd.service - Firmware update daemon Loaded: loaded (/usr/lib/systemd/system/fwupd.service; static) Active: inactive (dead) Docs: https://fwupd.org/ enabled earlyoom / systemd-oomd: no activos ############################################################ ### 12. CONFIGURACIÓN DE SERVICIOS QUE SUELEN COMER RAM ############################################################ --- Apache --- mpm_event_module (shared) --- Node / PM2 --- 20 MB /usr/bin/node /var/www/djpresidium/selector/backend/index.js 19 MB /usr/bin/node /var/www/djpresidium/patito/api_amor/. 27 MB PM2 v5.4.3: God Daemon (/root/.pm2) 36 MB node /var/www/gcastillo/portfolio/backend/app.js 27 MB node /var/www/clientes/PorEsoTeDigo/app.js 27 MB node /var/www/gcastillo/convertidor/convertidor.js 26 MB node /var/www/gcastillo/qr/backend/app.js 26 MB node /var/www/gcastillo/crj/backend/app.js 26 MB node /var/www/gcastillo/clases/backend/app.js 43 MB node /var/www/gcastillo/contador/backend/app.js 26 MB node /var/www/gcastillo/bus-tiempo-real/backend/app.js 26 MB node /var/www/gcastillo/flashcards/backend/app.js ############################################################ ### 13. ACTUALIZACIONES ############################################################ $ apt list --upgradable 2>/dev/null | wc -l 149 ############################################################ ### DIAGNÓSTICO AUTOMÁTICO ############################################################ Resumen: 4 críticos, 4 avisos >>> PROBLEMAS CRÍTICOS [CRÍTICO] NO hay swap configurada: cuando se llena la RAM el sistema se congela y salta el OOM killer sin margen. [CRÍTICO] Se han registrado 105 eventos OOM: el servidor se queda SIN MEMORIA (esto explica que deje de responder SSH/ping/servicios). Víctimas: fwupd (100x), unattended-upgr (3x), node (2x). [CRÍTICO] En el último OOM los que más memoria ocupaban eran: procs (342.2 MB en 8 procs), procs (139.4 MB en 1 procs), procs (45.7 MB en 2 procs) -> estos son los sospechosos reales. [CRÍTICO] 15747 intentos SSH fallidos en 24h: ataque de fuerza bruta (cada intento consume memoria y CPU). >>> AVISOS [AVISO] La VPS tiene solo 848 MB de RAM: muy justo para servidor web + base de datos. [AVISO] El servidor lleva menos de 1 día encendido (0 h): ¿reinicio reciente por caída? [AVISO] fail2ban no está instalado. [AVISO] fwupd (actualizador de firmware) está instalado: no sirve en una VPS y consume ~130 MB cada vez que arranca. Desactívalo: systemctl mask --now fwupd.service fwupd-refresh.service fwupd-refresh.timer >>> CORRECTO [OK] RAM disponible en este momento: 275 MB (32%). [OK] Hay salida a Internet (ping a 1.1.1.1 correcto). >>> CONCLUSIÓN PROBABLE * Causa principal: el servidor se queda SIN MEMORIA RAM. Mientras el kernel intenta liberar memoria, el sistema se congela (sin SSH, sin web y a veces sin ping) hasta que el OOM killer mata algo. Revisa en la sección 4 la tabla 'Memoria por proceso en el momento del último OOM' para ver al culpable. * Agravante: no hay swap, así que no hay margen antes del bloqueo. * Ataque de fuerza bruta SSH constante: instala fail2ban y desactiva el login por contraseña. Fin del informe - 2026-11-10 18:55:44