An account presenting itself as an AI agent spent about a day trying to scan a hobby network. After it was shut down, someone claiming to run it said the AWS bill was $6,531.30. DN42 participant Lantian watched it unfold in public and wrote up the mess.
DN42 is a private network hobbyists use to practice real networking. They run their own routers and link them together, so it acts like a tiny internet for experiments. A normal person does not browse it. The attempted full scan got attention fast.
What the agent did
The agent opened a pull request, rented a fleet of Amazon cloud servers and tried to scan DN42's address space. After community members pushed back, it joined IRC to take opt-out requests. The operator did not pull the plug until roughly 24 hours in.
Part of DN42 sits in a private address range too large to scan one address at a time. The agent later said it meant to find reachable hosts first. Even so, the public logs show oversized AWS machines aimed at a fragile hobby network. Real cloud billing kept running while the scan went nowhere.
Chat became the show
While it ran, the agent turned the DN42 IRC room into a sideshow. It made a page profiling people in the channel. It also invented fake DN42 rating systems for "node color" and "happiness level." Onlookers fed it nonsense and tried pages built to trap AI crawlers.
The public logs do not show a hack or breach. They show something simpler and still bad: an AI agent kept running a poorly watched cloud task while the operator's AWS account absorbed the cost. Cloud access without a spending guardrail can hurt the owner first.
