Hello everybody,

 

we currently have the following issue: one of the mirrors which is behind  http://centos.mirrors.as250.net has the hostname set to the EICAR AntiVirus test string, and now every connection from our network to these mirrors triggers alerts.

 

Is there any way to identify the person(s) rsponsible for the operation of the mirror and ask them if they could change this?

 

Best Regards,

   Tobias

 

 

Tobias Hahn

 

IT-Security Expert

GIAC certified Incident Handler (GCIH) & Forensic Analyst (GCFA)

 

Deutsche Lufthansa AG

Computer Emergency Response Team, FRA GIXSC

Airportring, Lufthansa Aviation Center (LAC)

D-60549 Frankfurt am Main

 

Mobile: +49 151 589 22792

Email:  tobias.hahn@dlh.de

Internet: http://www.lufthansagroup.com

 

SMIME-Certificate available at https://lh.securemail.lhsystems.com/certportal/

Lufthansa Root-CA available at https://www.lufthansagroup.com/de/ext/public-key-infrastructure.html