That seems to have done the trick, thank you! Mathieu PS. James, the registration has not been paid for a long time and we have two releases happening in June - when is it due? thanks for advising ________________________________ From: james burke <[email protected]> Sent: Tuesday, May 12, 2015 21:11 To: Mathieu ONeil Cc: [email protected]; [email protected] Subject: Re: [JoPP-Public] peerproduction.net -> 503 rebooted the server On Tue, May 12, 2015 at 10:34 AM, Mathieu ONeil <[email protected]<mailto:[email protected]>> wrote: Hi James and Javier peerproduction.net<http://peerproduction.net> is still down, can anything be done? cheers, Mathieu ________________________________________ From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> on behalf of maxigas <[email protected]<mailto:[email protected]>> Sent: Tuesday, May 12, 2015 5:53 To: [email protected]<mailto:[email protected]> Cc: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Subject: [JoPP-Public] peerproduction.net<http://peerproduction.net> -> 503 hi, The website is down! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sorry the server seems to be busy Please try again in a little while; or if you are a guru... Error 503 Service Unavailable Service Unavailable Guru Meditation: XID: 522666678 Varnish cache server ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I also checked: http://downforeveryoneorjustme.com/peerproduction.net which says "It's not just you! http://peerproduction.net looks down from here." -- maxigas, kiberpunk FA00 8129 13E9 2617 C614 0901 7879 63BC 287E D166 http://research.metatron.ai/ A: Because it breaks the logical sequence of discussion. Q: Why is top-posting bad? _______________________________________________ JoPP-Public mailing list [email protected]<mailto:[email protected]> https://lists.ourproject.org/cgi-bin/mailman/listinfo/jopp-public -- James Burke T:+31 (0)6 5244 6445 Twitter: https://twitter.com/lifesized LinkedIn: nl.linkedin.com/in/lifesized<http://nl.linkedin.com/in/lifesized> *

Sometimes server's go down and you need to reboot. I am not an expert so no clue To the specifics. On Tuesday, May 12, 2015, maxigas <[email protected]> wrote:

From: james burke <[email protected] <javascript:;>> Subject: Re: [JoPP-Public] peerproduction.net -> 503 Date: Tue, 12 May 2015 12:11:28 +0100

...

rebooted the server

Great, but why did the website go down?

In order to avoid future failures, it would be great to know what went wrong.

Also, if we have backups. :)

...

Web Bug from https://mailtrack.io/trace/mail/

What's that?

-- maxigas, kiberpunk FA00 8129 13E9 2617 C614 0901 7879 63BC 287E D166 http://research.metatron.ai/

A: Because it breaks the logical sequence of discussion. Q: Why is top-posting bad?

-- James Burke T:+31 (0)6 5244 6445 Twitter: https://twitter.com/lifesized LinkedIn: nl.linkedin.com/in/lifesized -

Hello Max, This is not one of my primary systems - I used to be more involved in the day-to-day of this particular server when the P2PF services (blog, wiki) resided there. Apparently, this particular instance of the problem was triggered by a brute-force attack from two different IP addresses, one from the US and another from China. I can dig a bit further if you want. Now I don't recall having performed the initial installation for www.peerproduction.net:80 nor surveys.peerproduction.net:80 (and certainly do not maintain them), so they don't appear to be hardened against this kind of attacks, and might even be vulnerable to known exploits - if no one else claims sysadmin rights on these hosts I can try and fit them on my schedule. BTW these hosts do not show up on our systems monitoring service either, but I can add them easily. Just let me know who to notify in case of service interruption. Cheers, On 2015-05-12 23:18 , maxigas wrote:

From: james burke <[email protected]> Subject: Re: peerproduction.net -> 503 Date: Tue, 12 May 2015 21:14:11 +0100

...

Sometimes server's go down and you need to reboot. I am not an expert so no clue To the specifics. I see. Thanks for the quick answer! Should javier know more? Who is the system administrator of the server where jopp is hosted then?

-- maxigas, kiberpunk FA00 8129 13E9 2617 C614 0901 7879 63BC 287E D166 http://research.metatron.ai/

A: Because it breaks the logical sequence of discussion. Q: Why is top-posting bad?

Con un cordial saludo, -Javier Arturo Rodríguez javierarturorodríguez software architect & system administrator +1(201)677.8201 • +52(55)2789.5475 • +34.671.038.007 • http://javier.rodriguez.org.mx/

From: james burke <[email protected]> Subject: Re: peerproduction.net -> 503 Date: Wed, 13 May 2015 11:26:24 +0200

Hi Javier,

Please do add them to our monitoring and thanks for the report!

hi Javier, Yes, it would be great if you could actively maintain the system, and also report before you get tired of it! :) Even if we find another solution in the future, it would be very very important to have the infrastructure actively maintained for the moment. Please confirm if/when the changes have been made, and tell us if you need any help. I am happy with your analysis of the situation and I guess adding the sites to the monitoring service and making sure the service applications and the operating systems is up to date would be a good first step to avoid future problems like this incident. ps: i am totally not sure but maybe fail2ban would have prevented these attacks? -- maxigas, kiberpunk FA00 8129 13E9 2617 C614 0901 7879 63BC 287E D166 http://research.metatron.ai/ A: Because it breaks the logical sequence of discussion. Q: Why is top-posting bad?