Postgres problem

January 29, 2018 1k views
PostgreSQL Ubuntu 16.04

After some time I've logged in in my postgres database and I discovered some strange databases and users I have never create. I try to delete them but i seem not to be superuser, while I'm sure to have assigned the attribute to myself. If I list all roles there is not one superuser.

Have I been hacked? I don't know, but the serious question is how do I crate an account with superuser privileges in order to solve the problem?

I really really hope that I don't have to reinstall postgres.

Thanks in advance for any help


3 Answers

Hi imeyer1, are you able to post what the names of those databases and users are? That way it may be easier to work out where they've come from.

Also, did you set up a super user when you created postgres?

Hi jwilson, the database names are: bxotgy. jbozdr, gebdko,ovqlfr, rfngpq, ucxmri, utqlan, ykbuca... not really names I would give. They have further no tables or other public schemas.

The owner is everywhere postgres.
The user is s48bc612 | Create role, Create DB, Replication +| {}

I created a user (myself) upon installation and I gave the superuser privileges, but now they are gone. So I can't delete or change anything in those databases
irene | Create role, Create DB | {}

I hope this clarifies the problem.

Ok, since I was really worried, I made a backup of my databases and restored the dorplet backup of a while ago, and yes, all strange databases and users are gone and I'm superuser again.

I really start to think that I have been hacked, and the question is how to avoid this in the future?

Have another answer? Share your knowledge.