[AusNOG] The shape of DDoS to come

[Paul Gear]

On 27/10/16 15:11, David Hughes wrote:
> 
> Hey Paul,
> 
> 
>> I'm curious about your take on the numbers being quoted.  Dyn claims
>> they saw traffic from 10s of millions of unique IPs, yet last estimates
>> of Mirai's size I heard were at least an order of magnitude lower than
>> that.
> 
> 
> http://qz.com/820003/dyn-dns-ddos-the-mirai-botnet-is-smaller-than-originally-thought/
> 
> "Dyn substantially lowered its estimate of the size of the botnet used
> in the attack to about 100,000 nodes, from an earlier estimate of tens
> of millions of infected devices.”

That sounds a lot more like it.  The other 9.9s of millions of nodes
would be all the normal customers hitting their DNS servers. :-)

Paul