How I Built a Real-Time DDoS Detection Engine from Scratch (No Fail2Ban, No Libraries) A beginner-friendly walkthrough of how I built a system that watches live web traffic, learns what "normal" looks like, and automatically blocks attackers — all from scratch using Python. Why This Project Exists Imagine you run a cloud storage platform. Thousands of users upload and download files every day. Then one morning, a single IP address starts sending 500 requests per second to your server — way more than any normal user would ever send. Your server starts slowing down. Real users can't log in. Files won't upload. Your platform is under attack. This is called a DDoS attack — Distributed Denial of Service. The goal is simple: flood your server with so much traffic that it can't serve real users anymore.…