> For the complete documentation index, see [llms.txt](https://docs.cooku222.kr/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cooku222.kr/security/defensive-security/tryhackme/junior-security-analyst-intro.md).

# Junior Security Analyst Intro

<figure><img src="https://blog.kakaocdn.net/dna/bBCSZt/dJMcahYzdCj/AAAAAAAAAAAAAAAAAAAAAH1tQInWC_lXNnz7AsrNqmWhrLT1XXnvQ9vEPYzmcAWc/img.png?credential=yqXZFxpELC7KVnFOS48ylbz2pIh7yKj8&#x26;expires=1782831599&#x26;allow_ip=&#x26;allow_referer=&#x26;signature=khXWfYqY94iQSHNAhwLczeszQ44%3D" alt="" height="1142" width="1404"><figcaption></figcaption></figure>

Q. 경보에서 악성 IP 주소는 무엇이었나요?

A. 위 사진에서 경보 울린 221.181.185.159가 악성 IP 주소이다.

<figure><img src="https://blog.kakaocdn.net/dna/eaRei9/dJMcajhKncr/AAAAAAAAAAAAAAAAAAAAALrRLpTvK1zDhGBawFsfCZyedV5hS6U-b9_eu_TziSV4/img.png?credential=yqXZFxpELC7KVnFOS48ylbz2pIh7yKj8&#x26;expires=1782831599&#x26;allow_ip=&#x26;allow_referer=&#x26;signature=j0fKmpmMbbABl9qKvCFapPYwfxQ%3D" alt="" height="340" width="1330"><figcaption></figcaption></figure>

번역: 인증 시도가 실패했다면 너무 걱정할 필요는 없지만, 악성 IP 주소에서 인증 시도가 성공했다는 것을 눈치채셨을 겁니다. 소규모 보안 사고로 선언하고 이를 보고해봅시다. 회사에는 훌륭한 직원들이 있지만, 당신의 팀이나 부서를 담당하지 않는 엉뚱한 사람에게 보고하고 싶지는 않을 겁니다.

Q. 누구한테 보고하는게 좋을까요?

A. Will Griffin

<figure><img src="https://blog.kakaocdn.net/dna/bg3CA4/dJMcahj0CdS/AAAAAAAAAAAAAAAAAAAAAJ-3X9MeDigZeo-eSYPb1KHP0rEzkzOtIYAraySP4Gv-/img.png?credential=yqXZFxpELC7KVnFOS48ylbz2pIh7yKj8&#x26;expires=1782831599&#x26;allow_ip=&#x26;allow_referer=&#x26;signature=DFc9zRmUYSBY6zuZ6B7WFOg%2BBhc%3D" alt="" height="624" width="1368"><figcaption></figcaption></figure>

Q. 방화벽에서 IP 주소를 차단한 후 어떤 메시지를 받았나요?

A. 앞서 발견한 악성 IP 주소를 입력하고 comment는 차단 IP라고만 적어둔다. 그럼 플래그가 나온다.&#x20;

THM{until-we-meet-again}

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cooku222.kr/security/defensive-security/tryhackme/junior-security-analyst-intro.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
