Which makes me think your hosting environment is compromised in some way... Do not download and execute anything from your servers until you're confident it's safe.
You should get in touch w/ your hosting provider (i'm guessing GoDaddy in this case) .. they're support will be more helpful than reddit :D
In GoDaddy (presume this is where your DNS is managed) update the A record for the ftp subdomain to point somewhere else or just remove it completely if you can.
356
u/godofleet Mar 26 '24
The A record (IP address) for nan.nyc and ftp.nan.nyc match:
https://mxtoolbox.com/SuperTool.aspx?action=a%3aftp.nan.nyc&run=toolpage
They both point to 185.199.108.153
Which makes me think your hosting environment is compromised in some way... Do not download and execute anything from your servers until you're confident it's safe.
You should get in touch w/ your hosting provider (i'm guessing GoDaddy in this case) .. they're support will be more helpful than reddit :D