Re: PGSQL 10, many Random named DB

On 01/24/2018 02:52 AM, Durumdara wrote:
> Hello!
>
> Somewhere the system administrator (who don't know the PG really)
> installed a PGSQL server (10.x) with a database.
> He couldn't manage the server well.
>
> Yesterday my colleague saw 21 databases in this server with random names.
> He checked it with built in PGAdmin IV.
> Today we checked it again, and we saw 33 databases.
>
> The first name is "ahucli" for example - like an aztec king... :-).
>
> The server OS is Windows, the PGSQL is 10.x.
>
> What can cause this strange thing?
>
> 1.) PGAdmin IV bug?

I doubt it but easy enough to double check. Use the psql command line
tool and do \l. Or find the $PGDATA
directory(https://www.postgresql.org/docs/10/static/storage-file-layout.html)
and see how many sub-directories there are base/ where each
sub-directory is a database.

> 2.) Their server is hacked/cracked from outside?

Is this server accessible from the outside?

> 3.) A wrong configured tool, or an automation?

My bet. Per Vincenzo's post check the logs.

> 4.) "Alien invasion", etc.
>
> Did you see same thing anywhere?
>
> Thank you for any advice in this theme!
>
> Best regards
>    dd
>

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com