On 01/24/2018 02:52 AM, Durumdara wrote:
Hello!
Somewhere the system administrator (who don't know the PG really)
installed a PGSQL server (10.x) with a database.
He couldn't manage the server well.
Yesterday my colleague saw 21 databases in this server with random names.
He checked it with built in PGAdmin IV.
Today we checked it again, and we saw 33 databases.
The first name is "ahucli" for example - like an aztec king... :-).
The server OS is Windows, the PGSQL is 10.x.
What can cause this strange thing?
1.) PGAdmin IV bug?
I doubt it but easy enough to double check. Use the psql command line
tool and do \l. Or find the $PGDATA
directory(https://www.postgresql.org/docs/10/static/storage-file-layout.html)
and see how many sub-directories there are base/ where each
sub-directory is a database.
2.) Their server is hacked/cracked from outside?
Is this server accessible from the outside?
3.) A wrong configured tool, or an automation?
My bet. Per Vincenzo's post check the logs.
4.) "Alien invasion", etc.
Did you see same thing anywhere?
Thank you for any advice in this theme!
Best regards
dd
--
Adrian Klaver
adrian.klaver@xxxxxxxxxxx
