Blocking off 4 /16 networks that were triggering a (self-induced) attack from 10s of thousands of devices sounds pretty distributed to me.

(I work at Bump and fought these very Zombies.)

The "distributed" part can simply reference the number of systems involved, it doesn't have to span networks all over the world.