Message-ID: <1513161371.5128.3.camel@cybertec.at>
Subject: Re: CPU 100% usage caused by unknown postgres process..
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Dinesh Chandra 12108 <Dinesh.Chandra@cyient.com>,
	"pgsql-performance@postgresql.org"
	 <pgsql-performance@postgresql.org>
Date: Wed, 13 Dec 2017 11:36:11 +0100
In-Reply-To: <68dd64b2a09f4fd8afe9582a4e23641e@cyient.com>
References: <68dd64b2a09f4fd8afe9582a4e23641e@cyient.com>
Organization: Cybertec
Content-Type: text/plain; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Precedence: bulk

Dinesh Chandra 12108 wrote:
> My CPU utilization is going to 100% in PostgreSQL because of one unknown process /x3303400001 is running from postgres user.
>  
> PID   USER      PR  NI    VIRT    RES    SHR S %CPU %MEM   TIME+   COMMAND
> 19885 postgres 20   0  192684   3916   1420 S 99.3  0.1   5689:04  x3303400001 
>  
> The same file is automatically created in Postgres Cluster also. I am using Postgresql-9.3.
>  
> Kindly suggest how can I resolve this issue.

I don't know, but the same problem has been reported on Stackoverflow:
https://stackoverflow.com/q/46617329/6464308

If your queries look similar, then you might indeed be the victim of an attack.

Figure out where the function and the executable come from.

In case of doubt, disconnect the server from the network.

Yours,
Laurenz Albe