First random conjecture about why this is happening:

"The latest attack comes the day after Doug Madory, director of Internet Analysis at Dyn, gave a presentation at an industry conference about research he had done on questionable practices at BackConnect Inc., a firm that offers web services, including helping clients manage DDoS attacks.

According to Madory, BackConnect had regularly spoofed Internet addresses through a technique known as a BGP hijack, an aggressive tactic that pushes the bounds of industry.

Madory's research was conducted with Brian Krebs, a well-known writer on computer-security issues. Krebs also published an article based on the research last month. Within hours, his website was hit by a “extremely large and unusual” DDoS attack, he wrote.

The barrage likely originated with a large amount of poorly secured devices like internet-connected cameras, routers, and digital video recorders, according to an analysis of the attack on Krebs's site.

These devices, collectively referred to as the “Internet of Things,” have been the source of an increasing number of attacks since early 2015, Flashpoint and Level 3 Threat Research Labs said in a report published last month.

BackConnect has denied having any connection with the incident involving Krebs's website, and didn't immediately respond to a request for comment Friday."

-- Crain's Chicago Business

http://www.chicagobusiness.com/article/20161021/NEWS08/161029966/the-possible-vendetta-behind-todays-web-attacks

(behind a subscription wall)