On 01/24/2018 02:52 AM, Durumdara wrote:
> Hello!
>
> Somewhere the system administrator (who don't know the PG really)
> installed a PGSQL server (10.x) with a database.
> He couldn't manage the server well.
>
> Yesterday my colleague saw 21 databases in this server with random names.
> He checked it with built in PGAdmin IV.
> Today we checked it again, and we saw 33 databases.
>
> The first name is "ahucli" for example - like an aztec king... :-).
>
> The server OS is Windows, the PGSQL is 10.x.
>
> What can cause this strange thing?
>
> 1.) PGAdmin IV bug?
I doubt it but easy enough to double check. Use the psql command line
tool and do \l. Or find the $PGDATA
directory(https://www.postgresql.org/docs/10/static/storage-file-layout.html)
and see how many sub-directories there are base/ where each
sub-directory is a database.
> 2.) Their server is hacked/cracked from outside?
Is this server accessible from the outside?
> 3.) A wrong configured tool, or an automation?
My bet. Per Vincenzo's post check the logs.
> 4.) "Alien invasion", etc.
>
> Did you see same thing anywhere?
>
> Thank you for any advice in this theme!
>
> Best regards
> dd
>
--
Adrian Klaver
adrian.klaver@aklaver.com
