The Infrastructure Team of The Apache Software Foundation is currently investigating a potential compromise of one of our servers. For security reasons most apache.org services are therefore offline, but will be restored shortly. We apologies for any inconvenience this may cause.

10:42am UTC: Compromise was due to a compromised SSH Key, not due to any software exploits in Apache itself.

More details soon.

10:53am UTC: We have restored services on our european mirror machine which was not compromised. DNS should be shifting you over right about ... now..