mod_pagespeed exploit? random folders in /var/cache/mod_pagespeed/v3

Skip to first unread message

sub scriibe

Sep 4, 2022, 1:05:39 PM9/4/22
to mod-pagespeed-discuss
Hi I created a new DigitalOcean droplet (wordpress one-click install) and then installed mod_pagespeed.

A couple hours later I look in the cache folder /var/cache/mod_pagespeed/ and there are domains getting added there that aren't mine -


I am only using this droplet for 1 website so why are all these other websites appearing in the cache?

I found this stackoverflow post with similar problem and I tried to implement the solutions suggested -

Please can someone confirm I've added the suggestions correctly?

Suggestion 1 ModPagespeedDomain

I've added this to my .htaccess file -

    <IfModule pagespeed_module>
        ModPagespeed on
        ModPagespeedMapRewriteDomain *

Suggestion 2 UseCanonicalName & UseCanonicalPhysicalPort

I added these lines to /etc/apache2/sites-enabled/000-default-le-ssl.conf

    UseCanonicalName On
    UseCanonicalPhysicalPort On

Is there anything I can do to stop this exploit?

Thanks for any help!

Otto van der Schaaf

Sep 4, 2022, 2:19:05 PM9/4/22
to mod-pagespeed-discuss
Reply all
Reply to author
0 new messages