The DDoS resumed immediately after the maintenance concluded, that would be why.