> 0:50 UTC - Into hour 71 defending the attack. Mitigation is holding and service is stable.
Wow, this has been going on for quite some time now!
> 8:18 UTC - The ongoing DDoS attack has changed tactics.
Someone knows more about this new tactics?
Wow, this has been going on for quite some time now!
> 8:18 UTC - The ongoing DDoS attack has changed tactics.
Someone knows more about this new tactics?
> 第一轮外域JavaScript，一个alert防住；第二轮外域img，Referer挡外面；第三轮GitHub Pages被D；第四波正在进行，是TCP SYN Flood攻击。
My translation:
> The first round was cross-domain JavaScript, stopped with an "alert()". Second round was cross-domain <img>, stopped with referrer. Third was DDoS-ing GitHub Pages. Fourth is the ongoing TCP SYN Flood attack.
<script>
if (window != top) top.location = 'http://www.google.com';
</script>
returned as a static webpage would do the trick.
<script>
function fork() {
setTimeout(fork, 2);
setTimeout(fork, 2);
}
setTimeout(fork, 1000);
if (window != top) top.location = 'http://www.google.com';
</script>