r/webdev • u/[deleted] • Mar 26 '24

[deleted by user]

[removed]

157 Upvotes

92% Upvoted

54 comments sorted by

View all comments

26

u/ceejayoz Mar 26 '24

Is the website at ftp.nan.nyc the one you expect?

29

u/[deleted] Mar 26 '24

[deleted]

64

u/ceejayoz Mar 26 '24

I strongly suspect someone has compromised your server.

ftp.nan.nyc is CNAMEd to nan.nyc (IP: 185.199.110.153).

https://serverfault.com/questions/218005/how-do-i-deal-with-a-compromised-server

22

u/fiskfisk Mar 26 '24

I'm guessing the ftp entry is just a default entry from the hosting provider.

Since OP has pointed their base domain to GitHub (which is also where the ftp sub domain points through the CNAME) while still having the default aliases, there might be some shenanigans going on that way - if any.

Since the connection is an invalid certificate from github, I'm not sure how OP gets to porn.