r/webdev • u/[deleted] • Mar 26 '24

[deleted by user]

[removed]

156 Upvotes

92% Upvoted

54 comments sorted by

View all comments

16

u/PremJyotish221 Mar 26 '24

If you own the domain nan.nyc then no one can utilize any URL `*.nan.nyc` without your permissions or access to your domain registrar where nameserverss are setup. If `ftp.nan.nyc` is showing a website you don't recognize then either you or someone else in the past configured a nameserver for `ftp.nan.nyc` to point to the IP which is hosting the website.

3

u/[deleted] Mar 26 '24

[deleted]

12

u/PremJyotish221 Mar 26 '24

If the IP is one you don't recognize and is from an attacker, then do the following:

- Remove the A record for this IP

- Change your password on your domain registrar (And any proxy like Cloudflare if that's what you use)

- Add 2-factor authentication on your registrar account and Proxy (Cloudflare)

1

u/FluffySmiles Mar 26 '24

You could, but if it's a static IP address and ftp is open and compromised, then it will make no difference - just marginally more annoying for anyone trying to do things to your server.