So a couple months ago we get a signup with the email address of noc@godaddy.com. The registered a domain and bought our cheapest package. This raised a few concerns so we called to confirm the order and verify it was legit. Spoke to the lady and all seemed in order. About 5 hours ago we notice odd commands running on the server. After further investigation we found the godaddy account was running commands via the a php script. The commands were limited to pings but they had tried several others without success...ie cat /etc/passwd, route, procinfo, nmap and several others. They did upload an nmap file of their own to use. We disabled the ability to run any type of command execution after we found the problem. My questions for you guys are what do you think Godaddy wass up to? Has anyone else had godaddy purchase an account with them?
Also they seemed to of bought the domain pretty quick after some transferred a domain from them to us.
