Hundreds of thousands may be conservative - looking at big DDoSes for which I can see data, we're probably not far off the millions mark, and the only reason it isn't worse is local ISPs with small pipes to the rest of the world.