The Day I Logged 1 In Every 2000 Public IPv4: Visualizing The AI Scraper DDoS
Summary
This post visualizes a large AI scraper DDoS using a Z-order curve to map /24 IPv4 blocks, revealing that over 2 million unique IPs targeted two SMB-friendly sites in 24 hours and that one in every 2,000 public IPv4 addresses participated. It discusses defense strategies, bot-detection evolution, and provides open-source tooling and a timelapse visualization, making it a practical case study in attacker distribution and the limits of block-based mitigation for small infrastructure.