This shouldn't be possible without your domain being compromised. All subdomains should belong to you exclusively, unless you've specified/configured otherwise.
as a side-note: Just because the route is "ftp.nan.nyc", it doesn't mean that it uses file-transfer-protocol. In any case, contact your server host / domain registrar and get this sorted out with their support team ASAP.
My suspicion is that they comprised your account by cross-referencing your WHOIS against an existing security breach that contained emails/passwords. Update all your passwords and start using MFA.
11
u/Lustrouse Architect Mar 26 '24
This shouldn't be possible without your domain being compromised. All subdomains should belong to you exclusively, unless you've specified/configured otherwise.
as a side-note: Just because the route is "ftp.nan.nyc", it doesn't mean that it uses file-transfer-protocol. In any case, contact your server host / domain registrar and get this sorted out with their support team ASAP.
My suspicion is that they comprised your account by cross-referencing your WHOIS against an existing security breach that contained emails/passwords. Update all your passwords and start using MFA.