nanog mailing list archives
Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app
From: Tony Finch <dot () dotat at>
Date: Mon, 14 Dec 2015 10:26:43 +0000
Jim Shankland <nanog () shankland org> wrote:
Also, this jumped out at me: "The problem with the recent attack is that the originating IP addresses were evenly distributed within the IPV4 universe," McAfee says. "This is virtually impossible using spoofing." Am I missing something, or is an even distribution of originating IP addresses virtually impossible *without* using spoofing?
You are correct and McAfee is confused. http://root-servers.org/news/events-of-20151130.txt DNS root name servers that use IP anycast observed this traffic at a significant number of anycast sites. This implies that the botnet was widely distributed. The source addresses of these particular queries appear to be randomized and distributed throughout the IPv4 address space. This says the attackers also used spoofing. Tony. -- f.anthony.n.finch <dot () dotat at> http://dotat.at/ Rockall, Malin, Hebrides, Bailey: East 5 to 7, occasionally gale 8 in Rockall. Moderate or rough, occasionally very rough in Rockall. Occasional rain. Good, occasionally poor.
Current thread:
- John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Jay Ashworth (Dec 11)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Colin Johnston (Dec 11)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Daniel Corbe (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Jim Shankland (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Roland Dobbins (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Rich Kulawiec (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Mark Andrews (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Christopher Morrow (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Jim Shankland (Dec 12)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Tony Finch (Dec 14)
- Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Wayne Wenthin (Dec 14)
- RE: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Frank Bulk (Dec 15)
- <Possible follow-ups>
- Fwd: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app Jonathan Hall (Dec 13)