Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Antonis Christodoulou <christan305(at)hotmail(dot)com>
Cc: Rob Sargent <robjsargent(at)gmail(dot)com>, pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours
Date: 2023-01-02 06:19:02
Message-ID: 1354569.1672640342@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Antonis Christodoulou <christan305(at)hotmail(dot)com> <VI1P193MB051005C8BE974502A0D4A315E1F79(at)VI1P193MB0510(dot)EURP193(dot)PROD(dot)OUTLOOK(dot)COM> writes:
> This is a machine in the cloud, I can’t disconnect it.

In that case, you need to be taking nonzero security precautions.

> And yes the ps looks like this precisely when I do a fresh restart. I kill all postgres processes and restart:
> Then this is the output of me ps:

That looks fine ... but this doesn't:

>>> postgres 3342383 1 0 2022 ? 00:00:00 FzXlkULu
>>> postgres 3344758 1 99 2022 ? 3-14:39:11 OElid7Dp
>>> postgres 3419125 1 18 13:57 ? 01:17:03 tracepath

Somebody is hacking into your system and commandeering it to run
something resource-intensive, possibly a bitcoin miner. Whatever
it is, it's trying to obscure its process name which is hardly
a sign of good intentions.

I'd counsel taking a hard look at your pg_hba.conf to be sure
it's not allowing non-credentialed logins from anywhere. And
for pete's sake don't use a guessable password.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Ahmet Demir 2023-01-02 06:29:47 Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours
Previous Message Antonis Christodoulou 2023-01-02 06:08:37 Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours