From: | Ahmet Demir <dbademir(at)gmail(dot)com> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | Antonis Christodoulou <christan305(at)hotmail(dot)com>, Rob Sargent <robjsargent(at)gmail(dot)com>, pgsql-general(at)lists(dot)postgresql(dot)org |
Subject: | Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours |
Date: | 2023-01-02 06:29:47 |
Message-ID: | CAHQEE72Eshq62m_Gf+cFDYDCHghVfDKshpuTdExiDMryfv5hHQ@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
And I can suggest checking cron jobs both on root and postgres, killing
those processes and changing root postgres passwords.
Ahmet
On Mon, 2 Jan 2023 at 09:19, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> Antonis Christodoulou <christan305(at)hotmail(dot)com> <
> VI1P193MB051005C8BE974502A0D4A315E1F79(at)VI1P193MB0510(dot)EURP193(dot)PROD(dot)OUTLOOK(dot)COM>
> writes:
> > This is a machine in the cloud, I can’t disconnect it.
>
> In that case, you need to be taking nonzero security precautions.
>
> > And yes the ps looks like this precisely when I do a fresh restart. I
> kill all postgres processes and restart:
> > Then this is the output of me ps:
>
> That looks fine ... but this doesn't:
>
> >>> postgres 3342383 1 0 2022 ? 00:00:00 FzXlkULu
> >>> postgres 3344758 1 99 2022 ? 3-14:39:11 OElid7Dp
> >>> postgres 3419125 1 18 13:57 ? 01:17:03 tracepath
>
> Somebody is hacking into your system and commandeering it to run
> something resource-intensive, possibly a bitcoin miner. Whatever
> it is, it's trying to obscure its process name which is hardly
> a sign of good intentions.
>
> I'd counsel taking a hard look at your pg_hba.conf to be sure
> it's not allowing non-credentialed logins from anywhere. And
> for pete's sake don't use a guessable password.
>
> regards, tom lane
>
>
>
From | Date | Subject | |
---|---|---|---|
Next Message | Antonis Christodoulou | 2023-01-02 06:34:22 | Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours |
Previous Message | Tom Lane | 2023-01-02 06:19:02 | Re: PostgreSQL 12 service failing in Ubuntu 20.04 after a few hours |