Image: reddit.com · Here is how a one-person hosting company handled it, with an AI sysadmin co-worker in the loop.
A one-person hosting company's AI sysadmin during the php2shell bugs
A hosting provider built fleet-wide PHP inventory, WAF rules and a probe detector live with an AI sysadmin agent during a PHP exploit disclosure.
Credits
- Reddit poster scoolplace Source ↗
Earliest dated source:
The full story
The poster runs a one-person hosting company. When two critical PHP remote-code-execution bugs were disclosed, probes hit their servers about 2.5 hours before a fix existed. With an AI sysadmin agent they built tooling live: an inventory mapping 4,000+ sites to their PHP builds, WAF rules for the exploit's request shape and an automated probe detector.
The detector blocked and logged 35+ scanner IPs across 20 servers, and 95% of sites were on patched builds by the next morning. The agent runs from two control VMs over Tailscale, is read-only by default, and changes things only through a plan the owner approves with a button.
How it was done
Tools
Themes
Loading themes…
Sources
From a short post by the maker, so the details are as they tell them.
- Reddit: Here is how a one-person hosting company handled it, with an AI sysadmin co-worker in the loop.Reddit poster: scoolplacePosted
The maker's post on r/ClaudeCode.
If it disappears: archived copy of Reddit: Here is how a one-person hosting company handled it, with an AI sysadmin co-worker in the loop. (opens in a new tab)