[CentOS-mirror] Mirror server with EICAR test string as hostname

Fri Jul 30 09:25:24 UTC 2021
HAHN, TOBIAS <tobias.hahn at dlh.de>

Hey Alpix,

thanks for the quick reply. I was able to quickly reach the responsible admin using the address you provided, although his replies came from noc at as250.net<mailto:noc at as250.net> His feedback to this issue: the EICAR string is transmitted on purpose, there are no plans to change this. I will check internally how we can handle this issue (either adjust detection or switch to another mirror).

Thanks & best Regards,
   Tobias

Von: CentOS-mirror <centos-mirror-bounces at centos.org> Im Auftrag von Alpix
Gesendet: Samstag, 24. Juli 2021 12:25
An: Mailing list for CentOS mirrors. <centos-mirror at centos.org>
Betreff: Re: [CentOS-mirror] Mirror server with EICAR test string as hostname

Hello Tobias,

as far as I know the mail of the responsible admin should be cdnops at as250.net<http://as250.net>!

That was the mail used to register the mirror back in 2014 and it was given as contact mail.
https://lists.centos.org/pipermail/centos-mirror/2014-August/008106.html

Greetings from Mannheim to Frankfurt
Lukas/Alpix

Am Sa., 24. Juli 2021 um 10:13 Uhr schrieb HAHN, TOBIAS <tobias.hahn at dlh.de<mailto:tobias.hahn at dlh.de>>:
Hello everybody,

we currently have the following issue: one of the mirrors which is behind  http://centos.mirrors.as250.net has the hostname set to the EICAR AntiVirus test string, and now every connection from our network to these mirrors triggers alerts.

Is there any way to identify the person(s) rsponsible for the operation of the mirror and ask them if they could change this?

Best Regards,
   Tobias

[cid:image001.png at 01D78535.961B4750]

Tobias Hahn

IT-Security Expert
GIAC certified Incident Handler (GCIH) & Forensic Analyst (GCFA)

Deutsche Lufthansa AG
Computer Emergency Response Team, FRA GIXSC
Airportring, Lufthansa Aviation Center (LAC)
D-60549 Frankfurt am Main

Mobile: +49 151 589 22792
Email:  tobias.hahn at dlh.de<mailto:tobias.hahn at dlh.de>
Internet: http://www.lufthansagroup.com<http://www.lufthansagroup.com/>

SMIME-Certificate available at https://lh.securemail.lhsystems.com/certportal/
Lufthansa Root-CA available at https://www.lufthansagroup.com/de/ext/public-key-infrastructure.html




Sitz der Gesellschaft / Corporate Headquarters: Deutsche Lufthansa Aktiengesellschaft, Koeln, Registereintragung / Registration: Amtsgericht Koeln HR B 2168
Vorsitzender des Aufsichtsrats / Chairman of the Supervisory Board: Dr. Karl-Ludwig Kley
Vorstand / Executive Board: Carsten Spohr (Vorsitzender / Chairman), Christina Foerster, Harry Hohmeister, Dr. Detlef Kayser, Dr. Michael Niggemann, Remco Steenbergen



Sitz der Gesellschaft / Corporate Headquarters: Deutsche Lufthansa Aktiengesellschaft, Koeln, Registereintragung / Registration: Amtsgericht Koeln HR B 2168
Vorsitzender des Aufsichtsrats / Chairman of the Supervisory Board: Dr. Karl-Ludwig Kley
Vorstand / Executive Board: Carsten Spohr (Vorsitzender / Chairman), Christina Foerster, Harry Hohmeister, Dr. Detlef Kayser, Dr. Michael Niggemann, Remco Steenbergen

_______________________________________________
CentOS-mirror mailing list
CentOS-mirror at centos.org<mailto:CentOS-mirror at centos.org>
https://lists.centos.org/mailman/listinfo/centos-mirror
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20210730/3e94d6d1/attachment-0005.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 30378 bytes
Desc: image001.png
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20210730/3e94d6d1/attachment-0005.png>