I'd like to have a look at the data or at least get a good rundown on why this attack was so special.
Dunno what you're asking for. The NGINX log just shows hundreds of IPs individually making single calls to https://kiwifarms.net/ with illegitimate browser agents that somehow bypassed Cloudflare. It was a huge botnet off many ISPs and trying to ban IPs manually by # of requests resulted in me banning people in chat.