Network Solutions down, Under Attack [resolved]

Many of our customers have servers located with Softlayer. According to this thread (softlayer account required):

“There’s an ongoing attack directed to Network Solutions from a number of providers. Currently the attacker is spoofing the source addresses making it quite difficult to track down. As such Network Solutions requested that we [Softlayer] block all outbound traffic to their netblock until further notice. They have also blocked all of our IP space inbound to their network at their provider’s edge.”

The thread continues a few posts later, “Unfortunately there is little we [Softlayer] can do in this situation. If NetSol wishes to continue blocking us based on the fact that they could possibly be hit with IPs spoofed from our blocks, that is completely within their right to do so. With that said, they aren’t just causing us issues. There was a brief thread on WHT about this same issue as well. They have blocked a number of providers including a large subset of Cogent IPs which is causing havoc around the US currently”.

According to our logs, the problem may have been occurring as early as Sunday 2008-08-10, but only for a few hours before connectivity resumed.

Friday, 2008-08-15 starting sometime around 5:00 AM ET, email (and other services) have been unable to reach [].

This has been going on for nearly a week now (with the Softlayer data center at least). I am surprised that this has gone under the radar.

We were first notified of this issue when email was not being sent to anyone that hosts email at Network Solutions ( Email is obviously an important part of business, and to just disrupt all communication for a week seems a bit ridiculous. There must be a better solution.

A few other stories on the topic: – Network Solutions falls of the web – Network Solutions under DoS attack – Network Solutions under attack

We will update this page as we have additional information.

Update 8/20/2008 3:45 PM ET

I spoke with a Softlayer rep a few minutes ago, he mentioned that his network team is still working with Network Solutions to completely resolve the issue.

Update 8/20/2008 4:52 PM ET

Issue still exists. No word from Softlayer yet as to the when this will be corrected. I see a few Softlayer employees reading this blog, how about an update?

Update 8/21/2008 10:50 AM ET

Service is still down. Official response from Softlayer:

“There is currently an on going attack to Network Solutions from multiple providers. We’ve been in contact with them about this for the past several days, and in an effort to mitigate the issue they requested we block any requests leaving our network destined for their netblock. This block is currently in place for all of our locations and will remain so until Network Solutions has requested it removed. We apologize for the inconvenience, but this is an ongoing issue that all parties involved are working to resolve.

Network Engineering”

Update 8/21/2008 3:41 PM ET

This appears to be resolved at Softlayer.