nanog mailing list archives

Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app


From: Rich Kulawiec <rsk () gsp org>
Date: Sat, 12 Dec 2015 12:42:20 -0500

On Sat, Dec 12, 2015 at 09:23:47AM -0800, Jim Shankland wrote:
Also, this jumped out at me:

"The problem with the recent attack is that the originating IP
addresses were evenly distributed within the IPV4 universe," McAfee
says. "This is virtually impossible using spoofing."

Am I missing something, or is an even distribution of originating IP
addresses virtually impossible *without* using spoofing?

I think it's quite doable using botnets.  I routinely log attacks/abuse 
that are clearly coordinated, yet originate from very diverse sources.

---rsk


Current thread: