Hosting / Server Maintenance Fix

Please login or register as jobseeker to apply for this job.

: TYPE OF WORK

Any

: WAGE / SALARY

10/hr

: HOURS PER WEEK

5

: DATE UPDATED

Jun 4, 2026

JOB OVERVIEW

Project Overview :
We've recently have had a backend issue with my main website. After speaking to the hosting admins, they provided me with the following fix instructions in which I would need someone to perform.

Task Description :
Essentially we need someone who is well versed in hosting / server / website management to perform this fix. If interested, please read the below analysis, and provide your written breakdown of the solution that you will perform, and your accurate timeframe to fix if provided the job.

------------------------------------------------------------------------------------------

During our investigation, we identified multiple issues affecting the server’s stability:

? The root (/) partition was full. To address this, I truncated a duplicate log file. The partition is currently at 90?pacity.

? The /tmp directory was in a read-only state. I have recreated /tmp and restarted the necessary services. WHM should be accessible now.

? However, shortly after the restart, the server experienced a load spike and ran out of memory. This triggered the out-of-memory killer (oom-killer) to terminate the Apache process in order to reduce the load.

Further investigation revealed multiple instances of a script running from the account zere86ro:

lsphp:/home/zere86ro/public_ ---------- p

Killing these processes only caused new ones to spawn, indicating suspicious activity. A malware scan confirmed that the account is infected. The scan results are available in the file /home/zere86ro/malware.txt.

To prevent the server from becoming unresponsive again, I changed the permissions of /home/zere86ro/public_ ---------- p to 000. Please note that once the account is cleaned and secured, it is advisable to reset the permissions back to 644 via the cPanel's File Manager.

? Additionally, we detected mass spam email activity originating from the email address ---------- on May 16, 2026, with over 1.27 million emails sent on that day. I have attached a file containing a summary of emails sent during the past 20 days for your reference.

To mitigate the impact, I strongly recommend that you:
Reset the account, all mailbox, and FTP passwords.
Clean all infected files from the account to prevent further issues.
I hope this email has covered all the necessary information. If you have any additional questions or concerns, please feel free to let us know. We will be happy to assist you.

SKILL REQUIREMENT

Website Builder Server

SHARE THIS POST

Job Post	Reporter	Rank	Reason	Date

BENCHMARKS

Loading Time: Base Classes	0.0008
Controller Execution Time ( Jobseekers / Job )	0.0279
Total Execution Time	0.0293

GET DATA

No GET data exists

MEMORY USAGE

1,500,672 bytes

POST DATA

No POST data exists

URI STRING

jobseekers/job/Hosting-Server-Maintenance-Fix-1661633

CLASS/METHOD

jobseekers/job

DATABASE: onlinejobs (Jobseekers:$db) QUERIES: 13 (0.0227 seconds) (Hide)

0.0003	`SELECT * FROM exrates WHERE rate_name = 'USD-PHP'`
0.0003	SELECT * FROM `employer_jobs` WHERE `job_id` = 1661633 LIMIT 1
0.0003	SELECT * FROM `employers` WHERE `employer_id` = 884407 LIMIT 1
0.0151	SELECT COUNT(DISTINCT t.id) as cnt FROM `t_thread` `t` INNER JOIN `t_message` `m` ON `t`.`id` = `m`.`thread_id` INNER JOIN `t_message_employer` `e` ON `m`.`id` = `e`.`message_id` LEFT JOIN `t_thread_misc` `misc` ON `t`.`id` = `misc`.`thread_id` WHERE `t`.`job_id` = 1661633 AND `misc`.`id` IS NULL
0.0005	SELECT e.business_name, e.logo, e.website, e.rebill_date, e.date_added member_date, hits, DATEDIFF('2026-06-21',ej.date_added) duration_days, DATEDIFF('2026-06-21',e.rebill_date) duration_rebill, ej.*, e.deactivate FROM employers e, employer_jobs ej WHERE e.employer_id = ej.employer_id AND ((e.user_level >= '500' AND ej.date_added <= e.rebill_date) OR e.employer_id = '' OR (ej.date_approved <> '2000-01-01' and DATEDIFF('2026-06-21',ej.date_added) <= 14 )) AND e.deactivate != 1 AND ej.deleted = 0 AND job_id = '1661633'
0.0003	SELECT * FROM `employer_jobs_skills` `ejs` LEFT JOIN `skills_categories` `sc` ON `ejs`.`skill_id` = `sc`.`id` WHERE `job_id` = 1661633
0.0013	`UPDATE employer_jobs SET hit_counts = '*Jun-04-2026=721Jun-05-2026=9Jun-06-2026=5Jun-07-2026=2Jun-08-2026=5Jun-09-2026=2Jun-10-2026=2Jun-11-2026=27Jun-12-2026=2Jun-14-2026=2Jun-15-2026=3Jun-16-2026=7Jun-18-2026=2Jun-19-2026=4**Jun-21-2026=1' WHERE job_id= '1661633'`
0.0006	`UPDATE employer_jobs SET monthly_hits = '***Jun-2026=793' WHERE job_id= '1661633'`
0.0008	`SELECT date_sent FROM jobseeker_sent_emails WHERE jobseeker_id = '' AND job_id = '1661633' AND status LIKE 'sent%' ORDER BY id DESC`
0.0003	SELECT * FROM `employer_jobs_skills` `ejs` LEFT JOIN `skills_categories` `sc` ON `ejs`.`skill_id` = `sc`.`id` WHERE `job_id` = 1661633
0.0026	SELECT COUNT(*) AS `numrows` FROM `employer_jobs` WHERE `employer_id` = '884407' AND `date_added` >= '2022-06-08'
0.0003	`select * from teasers`
0.0002	`SELECT * FROM skill_categories WHERE skill_cat_id=''`

HTTP HEADERS (Show)

SESSION DATA (Show)

__ci_last_regenerate	1782001555
last_page	https://v1.stage.onlinejobs.ph/jobseekers/job/Hosting-Server-Maintenance-Fix-1661633
csrf-token	7a38919df1f4c890aaa3d5c9fa9e3ff9

CONFIG VARIABLES (Show)

base_url	https://v1.stage.onlinejobs.ph
log_threshold	2
enable_profiler
index_page
uri_protocol	PATH_INFO
url_suffix
language	english
charset	UTF-8
enable_hooks	1
subclass_prefix	MY_
composer_autoload	vendor/autoload.php
permitted_uri_chars	a-z 0-9~%.:_\=\-\+\@?\&
enable_query_strings
controller_trigger	c
function_trigger	m
directory_trigger	d
allow_get_array	1
log_path
log_file_extension
log_file_permissions	420
log_date_format	Y-m-d H:i:s
error_views_path
cache_path
cache_query_string
encryption_key	OdBUArjiWg9I7u7bvAwQ7Fu35VB1kzga
sess_driver	files
sess_cookie_name	ci_session
sess_expiration	2678400
sess_save_path
sess_match_ip
sess_time_to_update	300
sess_regenerate_destroy
cookie_prefix
cookie_domain
cookie_path	/
cookie_secure
cookie_httponly
standardize_newlines
global_xss_filtering	1
csrf_protection
csrf_token_name	csrf_test_name
csrf_cookie_name	csrf_cookie_name
csrf_expire	7200
csrf_regenerate	1
csrf_exclude_uris	Array ( )
compress_output
time_reference	local
rewrite_short_tags
proxy_ips
ojadmin	JpjZkQN5A8l@^L
salt	+UFjSAT49tPZLtmU2CIG2FYN7pRhgsWyLHgSyQa6k3I=
queue_enabled
twilio	Array ( [sid] => AC00c0594045c6eef9407e8fff01f3d467 [token] => f0bfc0b73444a077894a43f5f75e6d41 [length] => 6 [from] => +639221200200 [code_expiry_seconds] => 14400 )
maintenance	Array ( [admin] => Array ( [verification] => ) [announcement_bar] => Array ( [show_slow_issue_message] => ) )
trustpilot	Array ( [to_email] => onlinejobs.ph+3d844ebf71@invite.trustpilot.com )
services	Array ( [google_tag_manager] => Array ( [id] => GTM-T5CQMS6P ) [chatgpt] => Array ( [secret] => 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 ) [claude] => Array ( [secret] => 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 ) )
v2_url	https://v2.onlinejobs.ph
v2	Array ( [enabled] => 1 [url] => https://v2.stage.app.onlinejobs.ph [api_url] => https://v2.stage.api.onlinejobs.ph [cookie_domain] => .onlinejobs.ph [paths] => Array ( [myaccount] => 1 ) )
replacemyself_secret_key	Kk1WpgTMkc4wBQOqC5rqCssdLhACKrsJeTtO1ywUkT4=
app	Array ( [app] => Array ( [command] => Array ( [map] => Array ( [OnlineJobs\Mailer\Command\SendEmailCommand] => OnlineJobs\Mailer\Handler\SendEmailHandler [OnlineJobs\Mail\Command\SendEmailCommand] => OnlineJobs\Mail\Handler\SendEmailHandler [OnlineJobs\Mail\Command\QueueEmailPendingCommand] => OnlineJobs\Mail\Handler\QueueEmailPendingHandler [OnlineJobs\Mail\Command\QueueJobEmailPendingCommand] => OnlineJobs\Mail\Handler\QueueJobEmailPendingHandler [OnlineJobs\Mail\Command\QueueUnapprovedEmailCommand] => OnlineJobs\Mail\Handler\QueueUnapprovedEmailHandler [OnlineJobs\Mail\Command\ProcessEmailQueueCommand] => OnlineJobs\Mail\Handler\ProcessEmailQueueHandler [OnlineJobs\Mail\Command\PutJobseekerEmailOnHoldCommand] => OnlineJobs\Mail\Handler\PutJobseekerEmailOnHoldHandler [OnlineJobs\Purchase\Command\RealEstateVaCourseCommand] => OnlineJobs\Purchase\Handler\RealEstateVaCourseHandler [OnlineJobs\Test\Command\HelloCommand] => OnlineJobs\Test\Handler\HelloHandler ) [middleware] => Array ( ) ) [providers] => Array ( [0] => OnlineJobs\Bus\BusServiceProvider [1] => OnlineJobs\Database\DbServiceProvider [2] => OnlineJobs\Mailer\MailerServiceProvider [3] => OnlineJobs\Support\SupportServiceProvider [4] => OnlineJobs\Employer\ServiceProvider [5] => OnlineJobs\Jobseeker\ServiceProvider [6] => OnlineJobs\Mail\ServiceProvider [7] => OnlineJobs\Postal\ServiceProvider [8] => OnlineJobs\Queue\ServiceProvider [9] => OnlineJobs\Courier\ServiceProvider [10] => OnlineJobs\Job\ServiceProvider [11] => OnlineJobs\Purchase\ServiceProvider ) ) )
meta	Array ( [facebook] => Array ( [input] => 1 [connect] => 2 [timezone] => 3 [url] => 30 [id] => 31 [photo] => 32 [name] => 33 [email] => 34 [review] => 35 ) [trust] => Array ( [government_id] => 4 [utility_bill] => 5 [selfie_photo] => 6 [profile_picture] => 7 [phone_number] => 8 [facebook] => 9 ) [verify] => Array ( [profile_picture] => 10 [government_id] => 11 [selfie_photo] => 12 [utility_bill] => 13 [address] => 14 [name] => 15 [reviewed] => 16 [government_group] => 28 [address_group] => 29 [mobile] => 38 ) [address] => Array ( [complete] => 17 [room_unit_no] => 20 [house_no] => 21 [street] => 22 [subdivision] => 23 [barangay] => 24 [city] => 25 [province] => 26 [postcode] => 27 ) [reviewed] => Array ( [similar_names] => 1 ) [name] => 18 [phone] => 19 [sms_verification_code] => 36 [resend_verification_code] => 37 [address_read] => 39 [first_name] => 100 [middle_name] => 101 [last_name] => 102 [edit] => Array ( [government_id_group] => 40 [address_group] => 41 [mobile_group] => 42 ) [salary_re_entry] => 103 [id_proof_recalibrate] => 104 [email] => 44 [mobile_verification_type] => 45 )
honeypot	Array ( [name_field] => my_name [enabled] => 1 )

HTTP_ACCEPT	/
HTTP_USER_AGENT	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
HTTP_CONNECTION	Upgrade
SERVER_PORT	80
SERVER_NAME	v1.stage.onlinejobs.ph
REMOTE_ADDR	127.0.0.1
SERVER_SOFTWARE	Apache/2.4.58 (Ubuntu)
HTTP_ACCEPT_LANGUAGE
SCRIPT_NAME	/index.php
REQUEST_METHOD	GET
HTTP_HOST
REMOTE_HOST
CONTENT_TYPE
SERVER_PROTOCOL	HTTP/1.1
QUERY_STRING
HTTP_ACCEPT_ENCODING	gzip, br, zstd, deflate
HTTP_X_FORWARDED_FOR	216.73.217.68
HTTP_DNT

Hosting / Server Maintenance Fix

Please login or register as jobseeker to apply for this job.

TYPE OF WORK

WAGE / SALARY

HOURS PER WEEK

DATE UPDATED

Why is this blurred?