Postgres problem

January 29, 2018 1.2k views
PostgreSQL Ubuntu 16.04

After some time I've logged in in my postgres database and I discovered some strange databases and users I have never create. I try to delete them but i seem not to be superuser, while I'm sure to have assigned the attribute to myself. If I list all roles there is not one superuser.

Have I been hacked? I don't know, but the serious question is how do I crate an account with superuser privileges in order to solve the problem?

I really really hope that I don't have to reinstall postgres.

Thanks in advance for any help

Cheers
Irene

3 Answers

Hi imeyer1, are you able to post what the names of those databases and users are? That way it may be easier to work out where they've come from.

Also, did you set up a super user when you created postgres?

Hi jwilson, the database names are: bxotgy. jbozdr, gebdko,ovqlfr, rfngpq, ucxmri, utqlan, ykbuca... not really names I would give. They have further no tables or other public schemas.

The owner is everywhere postgres.
The user is s48bc612 | Create role, Create DB, Replication +| {}

I created a user (myself) upon installation and I gave the superuser privileges, but now they are gone. So I can't delete or change anything in those databases
irene | Create role, Create DB | {}

I hope this clarifies the problem.

Ok, since I was really worried, I made a backup of my databases and restored the dorplet backup of a while ago, and yes, all strange databases and users are gone and I'm superuser again.

I really start to think that I have been hacked, and the question is how to avoid this in the future?

  • Hi there, we have the exact same issue, with the difference that our pg_hba.conf file has changes to.
    We have weird databases (wejhu, erwehr), weird user (i.e asedjh, sdjhf, ) and we cant even delete them! Did you found anything to explain this situation?

Have another answer? Share your knowledge.