The botnet would still be able to perform an attack of the same size.  And with many validation schemes it would still be able to randomize the last octet or two, avoiding direct identification of compromised computers.