John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app

Rich Kulawiec rsk at
Sat Dec 12 17:42:20 UTC 2015

On Sat, Dec 12, 2015 at 09:23:47AM -0800, Jim Shankland wrote:
> Also, this jumped out at me:
> "The problem with the recent attack is that the originating IP
> addresses were evenly distributed within the IPV4 universe," McAfee
> says. "This is virtually impossible using spoofing."
> Am I missing something, or is an even distribution of originating IP
> addresses virtually impossible *without* using spoofing?

I think it's quite doable using botnets.  I routinely log attacks/abuse 
that are clearly coordinated, yet originate from very diverse sources.


More information about the NANOG mailing list