After some time I’ve logged in in my postgres database and I discovered some strange databases and users I have never create. I try to delete them but i seem not to be superuser, while I’m sure to have assigned the attribute to myself. If I list all roles there is not one superuser.
Have I been hacked? I don’t know, but the serious question is how do I crate an account with superuser privileges in order to solve the problem?
I really really hope that I don’t have to reinstall postgres.
Thanks in advance for any help
Cheers Irene
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi jwilson, the database names are: bxotgy. jbozdr, gebdko,ovqlfr, rfngpq, ucxmri, utqlan, ykbuca… not really names I would give. They have further no tables or other public schemas.
The owner is everywhere postgres. The user is s48bc612 | Create role, Create DB, Replication +| {}
I created a user (myself) upon installation and I gave the superuser privileges, but now they are gone. So I can’t delete or change anything in those databases irene | Create role, Create DB | {}
I hope this clarifies the problem.
Ok, since I was really worried, I made a backup of my databases and restored the dorplet backup of a while ago, and yes, all strange databases and users are gone and I’m superuser again.
I really start to think that I have been hacked, and the question is how to avoid this in the future?
Hi imeyer1, are you able to post what the names of those databases and users are? That way it may be easier to work out where they’ve come from.
Also, did you set up a super user when you created postgres?
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.