Scale up as you grow — whether you're running one virtual machine or ten thousand.

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.

Hi I created a new droplet from a snapshot. I haven’t shared the new droplet IP with anyone and I haven’t made a website public on it either.
I am using this new droplet for 1 website only and it has <meta name=‘robots’ content=‘noindex, nofollow’ /> on it so I don’t know how anyone has found this server.
I thinks the droplet is hacked because I went to clear the cache and saw lots of random websites have been added there -
/var/cache/mod_pagespeed/v3/0.0.0.0 /var/cache/mod_pagespeed/v3/100000.space /var/cache/mod_pagespeed/v3/127.0.0.1 /var/cache/mod_pagespeed/v3/128.143.187.1 /var/cache/mod_pagespeed/v3/128.143.187.11 /var/cache/mod_pagespeed/v3/365ball.me /var/cache/mod_pagespeed/v3/375tv.com /var/cache/mod_pagespeed/v3/27.161.37.121 /var/cache/mod_pagespeed/v3/6969coin.com /var/cache/mod_pagespeed/v3/8n.nz /var/cache/mod_pagespeed/v3/a0s.cc /var/cache/mod_pagespeed/v3/azenv.net /var/cache/mod_pagespeed/v3/baidu.com /var/cache/mod_pagespeed/v3/bbx-1102.com /var/cache/mod_pagespeed/v3/example.com /var/cache/mod_pagespeed/v3/http%2C3A /var/cache/mod_pagespeed/v3/https%2C3A /var/cache/mod_pagespeed/v3/icook.tw /var/cache/mod_pagespeed/v3/kidccbot.com /var/cache/mod_pagespeed/v3/tp-000.com /var/cache/mod_pagespeed/v3/ukzaka.cn /var/cache/mod_pagespeed/v3/xcovitg.xyz /var/cache/mod_pagespeed/v3/xoilac3.com /var/cache/mod_pagespeed/v3/xoilac3.org /var/cache/mod_pagespeed/v3/yahoo.com
Does anyone know how these were added and how to stop them? They appear to be adding them everyday.
I made the snapshot on the 26th August. If I organized the above folders by last modified the 6969coin.com was added 2 hours after I added my website example.com.
The old snapshot hasn’t got this issue - the cache folder only has the sites that I added myself.
Should I delete this snapshot and make a new one? Or fix the exploit?
I tried to Google the issue but nothing obvious has come up.
Please can someone help?
Thank you
gerard
Jon Harris
orbitstorm88
rem3n
yolanda smith
301276acdc124dd982fe86364ba8c4
30ddab6038c044188d489290785dcb
699c9bc0a2c34f248e792cb8d2c6ab
Kent Morlan
sylvaticus
agitechcr
8b8f3c8ea96345bf8ddb0a59a008e2