The Day I Logged 1 In Every 2000 Public IPv4: Visualizing The AI Scraper DDoS

Coordinated AI web scrapers from major cloud providers launched a 2-million-IP DDoS attack hitting 1 in every 2,000 public IPv4 addresses, demonstrating how hyperscaler networks can be weaponized at scale against infrastructure defenses.

Thursday, April 30, 2026 12:00 PM UTC2 MIN READSOURCE: LobstersBY sys://pipeline

An infrastructure operator documents a massive distributed AI scraper DDoS attack on April 24, 2026, with 2.04 million unique IP addresses (1 in every 2,000 public IPv4s) hitting their single-vCPU VPS. Attack sources trace to major cloud providers (Alibaba AS45102, Huawei AS136907, Zenlayer AS21859) and hyperscaler networks (Google AS15169, Microsoft AS8075), with the single most prolific IP (Microsoft network) generating 150k+ requests daily. Defensive techniques including AS-level blocking and poison-trap garbage injection proved insufficient against the scale and distribution of the coordinated attack.