{"id":24131,"date":"2024-10-25T13:40:14","date_gmt":"2024-10-25T13:40:14","guid":{"rendered":"https:\/\/atmokpo.com\/w\/?p=24131"},"modified":"2024-11-26T08:04:11","modified_gmt":"2024-11-26T08:04:11","slug":"%ec%9a%b0%eb%b6%84%ed%88%ac-postgres-%ea%b3%84%ec%a0%95-%ec%bd%94%ec%9d%b8-%eb%a7%88%ec%9d%b4%eb%84%88-%ed%95%b4%ed%82%b9","status":"publish","type":"post","link":"https:\/\/atmokpo.com\/w\/24131\/","title":{"rendered":"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\uc6b0\uc5f0\ud788 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc5d0 top \uba85\ub839\uc744 \uccd0\ubcf4\ub2c8 \uc774\uc0c1\ud55c \ud504\ub85c\uc138\uc11c\uac00 \uc5c4\uccad\ub098\uac8c cpu\ub97c \uc7a1\uc544\uba39\uace0 \uc788\uc5c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">md5\ub85c \uac80\uc0c9\ud574\ubcf8 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c : 8f96e8b4e9d26884c776c1b42a70bae5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/otx.alienvault.com\/indicator\/file\/5e5fd0bc5f1bd663d7ccc2695c2b56bd382df3c7fdac605eb0ce3c0d5df24dc4\">https:\/\/otx.alienvault.com\/indicator\/file\/5e5fd0bc5f1bd663d7ccc2695c2b56bd382df3c7fdac605eb0ce3c0d5df24dc4<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc774\ud558\ub294 \ud574\uacb0 \uacfc\uc815<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud574\ub2f9 \ud504\ub85c\uc138\uc2a4\uac00 \uc758\uc2ec\uc2a4\ub7ec\uc6cc \ubcf4\uc785\ub2c8\ub2e4. <code>\/tmp\/.\/.kGX8ucb<\/code> \uac19\uc740 \uacbd\ub85c\uc640 \ud30c\uc77c \uc774\ub984\uc740 \ubcf4\ud1b5 \uc815\uc0c1\uc801\uc778 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uac00 \uc0ac\uc6a9\ud558\ub294 \ud615\uc2dd\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uc774\ub294 \uc545\uc131 \ucf54\ub4dc\ub098 \ud574\ud0b9\uc758 \uc77c\ubd80\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc0c1\ud669\uc5d0\uc11c \ube60\ub974\uac8c \uc870\uce58\ud574\uc57c \ud560 \uba87 \uac00\uc9c0 \ub2e8\uacc4\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4 \uc885\ub8cc<\/strong>: \ud574\ub2f9 \ud504\ub85c\uc138\uc2a4\ub97c \uac15\uc81c\ub85c \uc885\ub8cc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. <code>kill -9 3785242<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uc138\uc2a4\ub97c \uc885\ub8cc\ud558\uc2ed\uc2dc\uc624.<\/li>\n\n\n\n<li><strong>\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c \uc0ad\uc81c<\/strong>: \ud504\ub85c\uc138\uc2a4\ub97c \uc885\ub8cc\ud55c \ud6c4 <code>\/tmp\/.\/.kGX8ucb<\/code> \ud30c\uc77c\uc744 \uc0ad\uc81c\ud574\uc57c \ud569\ub2c8\ub2e4. <code>rm \/tmp\/.\/.kGX8ucb<\/code>\ub97c \uc2e4\ud589\ud558\uc2ed\uc2dc\uc624.<\/li>\n\n\n\n<li><strong>\ucd94\uac00 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4 \ud655\uc778<\/strong>: \ub2e4\ub978 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4\uac00 \uc2e4\ud589 \uc911\uc778\uc9c0 \ud655\uc778\ud558\ub824\uba74 <code>ps aux | grep tmp<\/code> \uac19\uc740 \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud574 <code>\/tmp<\/code> \ub514\ub809\ud1a0\ub9ac\uc5d0\uc11c \uc2e4\ud589 \uc911\uc778 \ub2e4\ub978 \ud504\ub85c\uc138\uc2a4\uac00 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624.<\/li>\n\n\n\n<li><strong>\uc2dc\uc2a4\ud15c \uc810\uac80<\/strong>: \uc2dc\uc2a4\ud15c\uc774 \uac10\uc5fc\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud558\uae30 \uc704\ud574 \ucd94\uac00\uc801\uc778 \ubcf4\uc548 \uc810\uac80\uc744 \uc218\ud589\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.\n<ul class=\"wp-block-list\">\n<li><code>rkhunter<\/code> \ub610\ub294 <code>chkrootkit<\/code> \uac19\uc740 \ub8e8\ud2b8\ud0b7 \ud0d0\uc9c0 \ub3c4\uad6c\ub97c \uc0ac\uc6a9\ud574 \uc2dc\uc2a4\ud15c\uc744 \uac80\uc0ac\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li>\uc2dc\uc2a4\ud15c \ub85c\uadf8 (<code>\/var\/log\/auth.log<\/code> \ub610\ub294 <code>\/var\/log\/syslog<\/code>)\ub97c \ud655\uc778\ud558\uc5ec \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud65c\ub3d9\uc774 \uc788\uc5c8\ub294\uc9c0 \uc0b4\ud3b4\ubcf4\uc138\uc694.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0 \ud655\uc778<\/strong>: <code>netstat -tulnp<\/code> \uba85\ub839\uc5b4\ub85c \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc744 \ud655\uc778\ud574 \uc678\ubd80\ub85c \uc5f0\uacb0\ub41c \uc774\uc0c1\ud55c \ud504\ub85c\uc138\uc2a4\uac00 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624.<\/li>\n\n\n\n<li><strong>\ud328\uce58 \ubc0f \uc5c5\ub370\uc774\ud2b8<\/strong>: \uc2dc\uc2a4\ud15c\uc774 \ucd5c\uc2e0 \uc0c1\ud0dc\uc778\uc9c0 \ud655\uc778\ud558\uace0, \uac00\ub2a5\ud55c \ubaa8\ub4e0 \ubcf4\uc548 \ud328\uce58\ub97c \uc801\uc6a9\ud558\uc2ed\uc2dc\uc624. <code>sudo apt update &amp;&amp; sudo apt upgrade<\/code>\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud328\ud0a4\uc9c0\ub97c \uc5c5\ub370\uc774\ud2b8\ud558\uc138\uc694.<\/li>\n\n\n\n<li><strong>\ube44\ubc00\ubc88\ud638 \ubcc0\uacbd<\/strong>: \ud639\uc2dc \ubaa8\ub97c \uacc4\uc815 \ud0c8\ucde8\uc5d0 \ub300\ube44\ud558\uc5ec, \uc11c\ubc84\uc758 \ubaa8\ub4e0 \uc0ac\uc6a9\uc790 \uacc4\uc815 \ube44\ubc00\ubc88\ud638\ub97c \ubcc0\uacbd\ud558\ub294 \uac83\ub3c4 \uc911\uc694\ud569\ub2c8\ub2e4.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0c1\ud669\uc5d0 \ub530\ub77c\uc11c\ub294 \ubc31\uc5c5 \ud6c4 \uc2dc\uc2a4\ud15c\uc744 \uc7ac\uc124\uce58\ud558\ub294 \uac83\ub3c4 \uace0\ub824\ud574 \ubcf4\uc2dc\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4o<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">\ub098\uc758 \ub9d0:<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\ud2b9\uc815\ud55c \uacc4\uc815\uc744 \uc0ac\uc6a9\ubabb\ud558\uac8c \uc7a0\uae00\uc218 \uc788\ub098? postgres \uacc4\uc815<\/p>\n\n\n\n<h6 class=\"wp-block-heading\">ChatGPT\uc758 \ub9d0:<\/h6>\n\n\n\n<p class=\"wp-block-paragraph\">ChatGPT<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub124, \uc6b0\ubd84\ud22c\uc5d0\uc11c \ud2b9\uc815 \uacc4\uc815\uc744 \uc7a0\uadf8\ub294 \ubc29\ubc95\uc744 \ud1b5\ud574 <code>postgres<\/code> \uacc4\uc815\uacfc \uac19\uc740 \ud2b9\uc815 \uc0ac\uc6a9\uc790 \uacc4\uc815\uc758 \ub85c\uadf8\uc778\uc744 \uc81c\ud55c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uacc4\uc815\uc744 \uc7a0\uadf8\ub294 \uba87 \uac00\uc9c0 \ubc29\ubc95\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. \uacc4\uc815 \uc7a0\uadf8\uae30 (\uc0ac\uc6a9 \ubd88\uac00\ub85c \uc124\uc815)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>passwd<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud574 \uacc4\uc815\uc744 \uc7a0\uae00 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo passwd -l postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>postgres<\/code> \uacc4\uc815\uc758 \ube44\ubc00\ubc88\ud638\ub97c \uc7a0\uae08 \uc0c1\ud0dc\ub85c \ubcc0\uacbd\ud558\uc5ec, \ud574\ub2f9 \uacc4\uc815\uc73c\ub85c \ub85c\uadf8\uc778\ud560 \uc218 \uc5c6\uac8c \ub9cc\ub4ed\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. \uc258\uc744 <code>\/bin\/false<\/code> \ub610\ub294 <code>\/sbin\/nologin<\/code>\uc73c\ub85c \ubcc0\uacbd<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ub85c\uadf8\uc778\uc744 \uc544\uc608 \ubd88\uac00\ub2a5\ud558\uac8c \ud558\ub824\uba74 \ud574\ub2f9 \uacc4\uc815\uc758 \uc258\uc744 \ubcc0\uacbd\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, <code>postgres<\/code> \uacc4\uc815\uc758 \uc258\uc744 <code>nologin<\/code>\uc73c\ub85c \uc124\uc815\ud558\uba74 \ud574\ub2f9 \uacc4\uc815\uc740 \ub85c\uadf8\uc778\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo usermod -s \/sbin\/nologin postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ub294<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo usermod -s \/bin\/false postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>postgres<\/code> \uc0ac\uc6a9\uc790\uac00 \uc258 \uc561\uc138\uc2a4\ub97c \uc2dc\ub3c4\ud560 \ub54c \uc811\uadfc\ud560 \uc218 \uc5c6\ub3c4\ub85d \ub9cc\ub4e4\uc5b4 \uc90d\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. \uacc4\uc815 \ub9cc\ub8cc \uc124\uc815<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uacc4\uc815 \uc790\uccb4\ub97c \ub9cc\ub8cc\uc2dc\ucf1c\uc11c \uc0ac\uc6a9\uc744 \uc81c\ud55c\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo usermod -e 1 postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>postgres<\/code> \uacc4\uc815\uc744 \ub9cc\ub8cc\ub41c \uc0c1\ud0dc\ub85c \ub9cc\ub4e4\uc5b4, \ub354 \uc774\uc0c1 \ub85c\uadf8\uc778\uc774 \ubd88\uac00\ub2a5\ud558\uac8c \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. \ud504\ub85c\uc138\uc2a4\uc640 \uc11c\ube44\uc2a4 \ud655\uc778 \ud6c4 \uc870\uce58<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9cc\uc57d <code>postgres<\/code> \uacc4\uc815\uc774 \ud574\ud0b9\uc5d0 \uc774\uc6a9\ub418\uc5c8\ub2e4\uba74, \ud574\ub2f9 \uacc4\uc815\uc774 \uc2dc\uc2a4\ud15c \ub0b4\uc5d0\uc11c \uc2e4\ud589 \uc911\uc778 \ud504\ub85c\uc138\uc2a4\ub098 \uc11c\ube44\uc2a4\uc5d0 \uad00\ub828\uc774 \uc788\uc744 \uc218 \uc788\uc73c\ub2c8 \ub2e4\uc74c \uba85\ub839\uc73c\ub85c \ud504\ub85c\uc138\uc2a4\ub97c \ud655\uc778\ud558\uace0 \uc885\ub8cc\ud558\ub294 \uac83\ub3c4 \uc911\uc694\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>ps aux | grep postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc744 \ud1b5\ud574 <code>postgres<\/code> \uacc4\uc815\uc774 \uc2e4\ud589 \uc911\uc778 \ud504\ub85c\uc138\uc2a4\ub97c \ud655\uc778\ud55c \ud6c4, \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4\ub97c \uac15\uc81c\ub85c \uc885\ub8cc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo kill -9 &lt;PID&gt;\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704 \ubc29\ubc95\ub4e4\uc744 \ud1b5\ud574 <code>postgres<\/code> \uacc4\uc815\uc744 \ud6a8\uacfc\uc801\uc73c\ub85c \uc7a0\uae00 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ub2f9\uc7a5 \ud574\ub2f9 \uacc4\uc815\uc744 \ub85c\uadf8\uc544\uc6c3 \uc2dc\ud0a4\ub294 \ubc29\ubc95<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub124, <code>postgres<\/code> \uacc4\uc815\uc744 \uc989\uc2dc \ub85c\uadf8\uc544\uc6c3\uc2dc\ud0a4\uace0, \ud574\ub2f9 \uacc4\uc815\uc758 \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4\ub97c \uc885\ub8cc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud574 <code>postgres<\/code> \uacc4\uc815\uc73c\ub85c \uc2e4\ud589 \uc911\uc778 \ubaa8\ub4e0 \uc138\uc158\uc744 \uac15\uc81c \uc885\ub8cc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. <code>postgres<\/code> \uacc4\uc815\uc758 \ud504\ub85c\uc138\uc2a4 \ud655\uc778<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uba3c\uc800 <code>postgres<\/code> \uacc4\uc815\uc73c\ub85c \uc2e4\ud589 \uc911\uc778 \ud504\ub85c\uc138\uc2a4\ub97c \ud655\uc778\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>ps -u postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc744 \uc2e4\ud589\ud558\uba74 <code>postgres<\/code> \uacc4\uc815\uc73c\ub85c \uc2e4\ud589 \uc911\uc778 \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4\uc758 \ubaa9\ub85d\uc744 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. <code>postgres<\/code> \uacc4\uc815\uc758 \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4 \uac15\uc81c \uc885\ub8cc<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\uc74c \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uba74 <code>postgres<\/code> \uacc4\uc815\uc73c\ub85c \uc2e4\ud589 \uc911\uc778 \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4\ub97c \uc989\uc2dc \uc885\ub8cc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo pkill -u postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>postgres<\/code> \uacc4\uc815\uc774 \uc2e4\ud589\ud558\uace0 \uc788\ub294 \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4\ub97c \uac15\uc81c\ub85c \uc885\ub8cc\ud569\ub2c8\ub2e4. \uc774\ub85c \uc778\ud574 \ud574\ub2f9 \uacc4\uc815\uc774 \uc2e4\ud589 \uc911\uc778 \ubaa8\ub4e0 \uc138\uc158\uc774 \ub85c\uadf8\uc544\uc6c3\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. \ucd94\uac00 \ud655\uc778<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc885\ub8cc \ud6c4 \ub2e4\uc2dc \ud504\ub85c\uc138\uc2a4\ub97c \ud655\uc778\ud558\uc5ec <code>postgres<\/code> \uacc4\uc815\uc774 \uc5ec\uc804\ud788 \uc2e4\ud589 \uc911\uc778\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>ps -u postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uacfc\uc815\uc73c\ub85c <code>postgres<\/code> \uacc4\uc815\uc744 \uc989\uc2dc \ub85c\uadf8\uc544\uc6c3\uc2dc\ud0ac \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>postgres \uacc4\uc815 \ub85c\uadf8\uc778 \uc815\ubcf4\ub97c \ubcfc\uc218 \uc788\ub098? \uc6b0\ubd84\ud22c\uc5d0\uc11c<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc6b0\ubd84\ud22c\uc5d0\uc11c \ud2b9\uc815 \uacc4\uc815(\uc608: <code>postgres<\/code>)\uc758 \ub85c\uadf8\uc778 \uae30\ub85d\uc744 \ud655\uc778\ud558\ub824\uba74, \uba87 \uac00\uc9c0 \ub85c\uadf8 \ud30c\uc77c\uacfc \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub300\ud45c\uc801\uc73c\ub85c \ub85c\uadf8\uc778 \uae30\ub85d\uc740 <code>\/var\/log\/wtmp<\/code>, <code>\/var\/log\/auth.log<\/code> \ud30c\uc77c\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. <code>last<\/code> \uba85\ub839\uc5b4 \uc0ac\uc6a9\ud558\uae30<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>last<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uba74 \uc2dc\uc2a4\ud15c\uc5d0 \ub85c\uadf8\uc778\ud55c \uc0ac\uc6a9\uc790\uc758 \uae30\ub85d\uc744 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>last postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>postgres<\/code> \uacc4\uc815\uc73c\ub85c \ub85c\uadf8\uc778\ud55c \ubaa8\ub4e0 \uae30\ub85d\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \uc5ec\uae30\uc5d0\ub294 \ub85c\uadf8\uc778 \ubc0f \ub85c\uadf8\uc544\uc6c3 \uc2dc\uac04, \ub85c\uadf8\uc778\ud55c \uc704\uce58(IP \uc8fc\uc18c \ub4f1) \ub4f1\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. <code>auth.log<\/code> \ud30c\uc77c \ud655\uc778<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>\/var\/log\/auth.log<\/code> \ud30c\uc77c\uc5d0\ub294 \uc778\uc99d \uad00\ub828 \uc774\ubca4\ud2b8\uac00 \uae30\ub85d\ub429\ub2c8\ub2e4. \uc5ec\uae30\uc5d0\ub294 \uc0ac\uc6a9\uc790 \ub85c\uadf8\uc778 \uc2dc\ub3c4, \uc131\uacf5 \ubc0f \uc2e4\ud328\ud55c \ub85c\uadf8\uac00 \uae30\ub85d\ub429\ub2c8\ub2e4. <code>grep<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud574 <code>postgres<\/code> \uacc4\uc815\uc5d0 \ub300\ud55c \ub85c\uadf8\uc778 \uad00\ub828 \uc815\ubcf4\ub97c \ud544\ud130\ub9c1\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo grep 'postgres' \/var\/log\/auth.log\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc744 \uc2e4\ud589\ud558\uba74 <code>postgres<\/code> \uacc4\uc815\uacfc \uad00\ub828\ub41c \ub85c\uadf8\uc778 \uc2dc\ub3c4, \uc131\uacf5 \ub610\ub294 \uc2e4\ud328\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. <code>journalctl<\/code> \uba85\ub839\uc5b4 \uc0ac\uc6a9\ud558\uae30<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>systemd<\/code>\ub97c \uc0ac\uc6a9\ud558\ub294 \uc2dc\uc2a4\ud15c\uc5d0\uc11c\ub294 <code>journalctl<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec <code>postgres<\/code> \uacc4\uc815\uacfc \uad00\ub828\ub41c \ub85c\uadf8\uc778 \uc774\ubca4\ud2b8\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo journalctl _COMM=postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>postgres<\/code> \uc11c\ube44\uc2a4 \ub610\ub294 \uacc4\uc815\uacfc \uad00\ub828\ub41c \ubaa8\ub4e0 \ub85c\uadf8\ub97c \ud45c\uc2dc\ud569\ub2c8\ub2e4. \uc5ec\uae30\uc11c \ub85c\uadf8\uc778 \uc2dc\ub3c4\ub098 \uad00\ub828\ub41c \ud65c\ub3d9\uc744 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. <code>\/var\/log\/wtmp<\/code> \ud30c\uc77c \ud655\uc778<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><code>wtmp<\/code> \ud30c\uc77c\uc740 \ubaa8\ub4e0 \ub85c\uadf8\uc778, \ub85c\uadf8\uc544\uc6c3, \uc2dc\uc2a4\ud15c \uc7ac\ubd80\ud305 \uae30\ub85d\uc744 \ubcf4\uad00\ud558\ub294 \ubc14\uc774\ub108\ub9ac \ud30c\uc77c\uc785\ub2c8\ub2e4. <code>last<\/code> \uba85\ub839\uc5b4\ub294 \uae30\ubcf8\uc801\uc73c\ub85c \uc774 \ud30c\uc77c\uc744 \ucc38\uc870\ud569\ub2c8\ub2e4. <code>wtmp<\/code> \ud30c\uc77c\uc744 \uc9c1\uc811 \ud655\uc778\ud558\ub824\uba74:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>last -f \/var\/log\/wtmp | grep postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 <code>wtmp<\/code> \ud30c\uc77c\uc5d0\uc11c <code>postgres<\/code> \uacc4\uc815\uacfc \uad00\ub828\ub41c \ub85c\uadf8\uc778\/\ub85c\uadf8\uc544\uc6c3 \uae30\ub85d\uc744 \ud45c\uc2dc\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704 \uba85\ub839\uc5b4\ub4e4\uc744 \ud1b5\ud574 <code>postgres<\/code> \uacc4\uc815\uc758 \ub85c\uadf8\uc778 \uc815\ubcf4\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc73c\uba70, \uc774 \uc815\ubcf4\ub97c \uae30\ubc18\uc73c\ub85c \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ub85c\uadf8\uc778 \ud65c\ub3d9\uc744 \ud30c\uc545\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc774\uc0c1\ud55c \ud30c\uc77c\ub4e4\uc774 \ub9c9 \uc0dd\uae30\ub294\ub370 \uc774 \ud30c\uc77c\ub4e4\uc744 \ubd84\uc11d\ud560\uc218\ub294 \uc5c6\ub098? \ud574\ud0b9\ud234\uc778\uac70 \uac19\uc740\ub370<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\ub4e4\uc774 \uc6b0\ubd84\ud22c \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc0dd\uc131\ub418\uace0 \uc788\ub2e4\uba74, \ud574\ub2f9 \ud30c\uc77c\ub4e4\uc744 \ubd84\uc11d\ud558\uc5ec \uc545\uc131\ucf54\ub4dc(\ud574\ud0b9\ud234)\uc778\uc9c0 \uc5ec\ubd80\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uba87 \uac00\uc9c0 \ubc29\ubc95\uc744 \ud1b5\ud574 \ud30c\uc77c\uc744 \ubd84\uc11d\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c \ub2e8\uacc4\ub4e4\uc744 \ub530\ub77c \ubd84\uc11d\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. <strong>\ud30c\uc77c\uc758 \uae30\ubcf8 \uc815\ubcf4 \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uba3c\uc800 \ud30c\uc77c\uc758 \uae30\ubcf8\uc801\uc778 \uc18d\uc131\uc744 \ud655\uc778\ud558\uc5ec \ud30c\uc77c\uc774 \uc5b4\ub5a4 \uc720\ud615\uc778\uc9c0, \ub204\uac00 \ub9cc\ub4e4\uc5c8\ub294\uc9c0, \uc5b8\uc81c \ub9cc\ub4e4\uc5b4\uc84c\ub294\uc9c0\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>ls -l \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 \ud574\ub2f9 \ud30c\uc77c\uc758 \uc18c\uc720\uc790, \uad8c\ud55c, \ud30c\uc77c \uc0dd\uc131 \uc2dc\uac04 \ub4f1\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>file \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 \ud30c\uc77c\uc758 \uc720\ud615\uc744 \ud655\uc778\ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, \ubc14\uc774\ub108\ub9ac \ud30c\uc77c\uc778\uc9c0, \uc2a4\ud06c\ub9bd\ud2b8 \ud30c\uc77c\uc778\uc9c0 \ub4f1\uc744 \uc54c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. <strong>\ud30c\uc77c\uc758 \ud574\uc2dc \uac12 \uc0dd\uc131 (\ubb34\uacb0\uc131 \uac80\uc0ac)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud30c\uc77c\uc758 \ubb34\uacb0\uc131\uc744 \ud655\uc778\ud558\uac70\ub098 \ub2e4\ub978 \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc720\uc0ac\ud55c \ud30c\uc77c\uc744 \uac80\uc0c9\ud560 \uc218 \uc788\ub3c4\ub85d \ud574\uc2dc \uac12\uc744 \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. MD5\ub098 SHA256 \uac19\uc740 \ud574\uc2dc \uac12\uc744 \uc0dd\uc131\ud558\uc5ec \ud574\ub2f9 \ud30c\uc77c\uc774 \uc545\uc131\ucf54\ub4dc \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc5d0 \uc788\ub294\uc9c0 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>md5sum \/path\/to\/suspicious_file\nsha256sum \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ud574\uc2dc \uac12\uc744 \uc0ac\uc6a9\ud574 \ubc14\uc774\ub7ec\uc2a4 \ud1a0\ud0c8(VirusTotal) \uac19\uc740 \uc628\ub77c\uc778 \uc11c\ube44\uc2a4\uc5d0\uc11c \ud30c\uc77c\uc744 \uac80\uc0ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. <strong>\uc628\ub77c\uc778 \uc545\uc131\ucf54\ub4dc \uac80\uc0ac \ub3c4\uad6c \uc0ac\uc6a9 (VirusTotal \ub4f1)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud30c\uc77c\uc744 \uc9c1\uc811 \uc5c5\ub85c\ub4dc\ud574 \uc545\uc131\ucf54\ub4dc \uc5ec\ubd80\ub97c \uac80\uc0ac\ud558\ub294 \ubc29\ubc95\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. <code>VirusTotal<\/code> \uac19\uc740 \uc11c\ube44\uc2a4\ub294 \ud30c\uc77c\uc744 \uc5ec\ub7ec \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc744 \ud1b5\ud574 \ubd84\uc11d\ud574\uc90d\ub2c8\ub2e4.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\uc744 \ub2e4\uc6b4\ub85c\ub4dc\ud558\uc5ec \uc548\uc804\ud55c \ub124\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574 <a href=\"https:\/\/www.virustotal.com\/\">VirusTotal<\/a>\uc5d0 \uc5c5\ub85c\ub4dc\ud569\ub2c8\ub2e4.<\/li>\n\n\n\n<li>\ub610\ub294 \ud30c\uc77c\uc758 \ud574\uc2dc \uac12\uc744 VirusTotal\uc5d0 \uc785\ub825\ud558\uc5ec \ud574\ub2f9 \ud30c\uc77c\uc774 \uc774\ubbf8 \ubd84\uc11d\ub41c \uc801\uc774 \uc788\ub294\uc9c0 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">4. <strong><code>strings<\/code> \uba85\ub839\uc5b4\ub85c \ud30c\uc77c \ub0b4\ubd80 \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ubc14\uc774\ub108\ub9ac \ud30c\uc77c\uc774\ub354\ub77c\ub3c4 <code>strings<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud574 \ud30c\uc77c \ub0b4\uc5d0 \uc0ac\ub78c\uc774 \uc77d\uc744 \uc218 \uc788\ub294 \ud14d\uc2a4\ud2b8 \uc815\ubcf4\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \ud1b5\ud574 \uc545\uc131\ucf54\ub4dc\uc758 \ub2e8\uc11c\ub97c \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>strings \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 \ud30c\uc77c \ub0b4\ubd80\uc758 \ud14d\uc2a4\ud2b8(\uc608: URL, \uba85\ub839\uc5b4 \ub4f1)\ub97c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \uc545\uc131\ucf54\ub4dc\uc758 \ud754\uc801\uc774 \ub420 \uc218 \uc788\ub294 URL\uc774\ub098 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. <strong><code>lsof<\/code> \uba85\ub839\uc73c\ub85c \ud30c\uc77c \uc0ac\uc6a9 \uc5ec\ubd80 \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud574\ub2f9 \ud30c\uc77c\uc774 \ud604\uc7ac \uc5b4\ub5a4 \ud504\ub85c\uc138\uc2a4\uc5d0\uc11c \uc0ac\uc6a9\ub418\uace0 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uae30 \uc704\ud574 <code>lsof<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>lsof \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\uc744 \uc5f4\uace0 \uc788\ub294 \ud504\ub85c\uc138\uc2a4\ub098 \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \ub9cc\uc57d \uc774 \ud30c\uc77c\uc774 \uc545\uc131 \ud504\ub85c\uc138\uc2a4\uc5d0\uc11c \uc0ac\uc6a9 \uc911\uc774\ub77c\uba74, \ud574\ub2f9 \ud504\ub85c\uc138\uc2a4\ub97c \uc885\ub8cc\ud558\uace0 \ud30c\uc77c\uc744 \uaca9\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. <strong>\ud30c\uc77c\uc758 \ub124\ud2b8\uc6cc\ud06c \ud65c\ub3d9 \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud30c\uc77c\uc774 \uc2e4\ud589 \uc911\uc774\ub77c\uba74 \ub124\ud2b8\uc6cc\ud06c \ud65c\ub3d9\uc744 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc545\uc131\ucf54\ub4dc\uac00 \uc678\ubd80\ub85c \ub370\uc774\ud130\ub97c \uc804\uc1a1\ud558\uace0 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uae30 \uc704\ud574 <code>netstat<\/code> \ub610\ub294 <code>ss<\/code> \uba85\ub839\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>netstat -tulnp\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 \ud604\uc7ac \uc5f4\ub824 \uc788\ub294 \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc744 \ud655\uc778\ud558\uc5ec \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \uc5f0\uacb0\uc774 \uc788\ub294\uc9c0 \ucc3e\uc2b5\ub2c8\ub2e4. \ub610\ud55c \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\uc774 \uc678\ubd80 \uc11c\ubc84\ub85c \uc5f0\uacb0\ub418\uace0 \uc788\ub294\uc9c0 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. <strong>\uc545\uc131\ucf54\ub4dc \uc0cc\ub4dc\ubc15\uc2a4 \ubd84\uc11d \ub3c4\uad6c \uc0ac\uc6a9<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9cc\uc57d \ubcf4\ub2e4 \uc804\ubb38\uc801\uc778 \uc545\uc131\ucf54\ub4dc \ubd84\uc11d\uc744 \ud558\uace0\uc790 \ud55c\ub2e4\uba74 \uc0cc\ub4dc\ubc15\uc2a4 \ubd84\uc11d \ub3c4\uad6c\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ub3c4\uad6c\ub294 \ud30c\uc77c\uc744 \uc548\uc804\ud55c \ud658\uacbd\uc5d0\uc11c \uc2e4\ud589\ud558\uc5ec \ud30c\uc77c\uc758 \ud589\ub3d9\uc744 \ucd94\uc801\ud569\ub2c8\ub2e4. \uc624\ud508 \uc18c\uc2a4 \uc0cc\ub4dc\ubc15\uc2a4 \ub3c4\uad6c\ub85c\ub294 <strong>Cuckoo Sandbox<\/strong>\uac00 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/cuckoosandbox.org\/\">Cuckoo Sandbox<\/a>\ub294 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\uc744 \uac00\uc0c1 \ud658\uacbd\uc5d0\uc11c \uc2e4\ud589\ud574 \ud30c\uc77c\uc774 \uc5b4\ub5a4 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub294\uc9c0 \ucd94\uc801\ud569\ub2c8\ub2e4.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">8. <strong>ClamAV \uac19\uc740 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \ub3c4\uad6c \uc0ac\uc6a9<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc6b0\ubd84\ud22c\uc5d0\uc11c\ub294 \uc624\ud508 \uc18c\uc2a4 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \ud504\ub85c\uadf8\ub7a8\uc778 <strong>ClamAV<\/strong>\ub97c \uc0ac\uc6a9\ud574 \uc2dc\uc2a4\ud15c\uc744 \uac80\uc0ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ClamAV \uc124\uce58 \ubc0f \uac80\uc0ac:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo apt update\nsudo apt install clamav\nsudo freshclam  # \ubc14\uc774\ub7ec\uc2a4 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc5c5\ub370\uc774\ud2b8\nsudo clamscan -r \/path\/to\/directory\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 \uc9c0\uc815\ub41c \ub514\ub809\ud1a0\ub9ac \ub610\ub294 \ud30c\uc77c\uc744 \uac80\uc0ac\ud558\uc5ec \uc545\uc131\ucf54\ub4dc\ub97c \ucc3e\uc544\uc90d\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">9. <strong>\uc2e4\ud589 \uad8c\ud55c \uc81c\uac70 \ubc0f \ud30c\uc77c \uc0ad\uc81c<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud30c\uc77c\uc774 \uc545\uc131\ucf54\ub4dc\ub85c \ud655\uc778\ub418\uac70\ub098 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \uacbd\uc6b0, \ud30c\uc77c\uc758 \uc2e4\ud589 \uad8c\ud55c\uc744 \uc81c\uac70\ud558\uace0 \uaca9\ub9ac\ud558\uac70\ub098 \uc0ad\uc81c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2e4\ud589 \uad8c\ud55c \uc81c\uac70:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>chmod -x \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ud30c\uc77c \uc0ad\uc81c:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>rm \/path\/to\/suspicious_file\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\uc694\uc57d<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\ud30c\uc77c\uc758 \uae30\ubcf8 \uc815\ubcf4\ub97c \ud655\uc778 (<code>ls<\/code>, <code>file<\/code>).<\/li>\n\n\n\n<li>\ud30c\uc77c\uc758 \ud574\uc2dc \uac12\uc744 \uc0dd\uc131\ud574 \uc628\ub77c\uc778 \ub3c4\uad6c (VirusTotal)\uc5d0\uc11c \uac80\uc0ac.<\/li>\n\n\n\n<li><code>strings<\/code> \uba85\ub839\uc5b4\ub85c \ud30c\uc77c \ub0b4\ubd80 \ud14d\uc2a4\ud2b8\ub97c \ud655\uc778.<\/li>\n\n\n\n<li><code>lsof<\/code> \uba85\ub839\uc5b4\ub85c \ud30c\uc77c\uc774 \uc0ac\uc6a9 \uc911\uc778\uc9c0 \ud655\uc778.<\/li>\n\n\n\n<li>\ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc744 \ud655\uc778 (<code>netstat<\/code>, <code>ss<\/code>).<\/li>\n\n\n\n<li>\uc0cc\ub4dc\ubc15\uc2a4 \ub3c4\uad6c(Cuckoo Sandbox)\ub97c \ud1b5\ud574 \ud30c\uc77c \ud589\ub3d9 \ubd84\uc11d.<\/li>\n\n\n\n<li>ClamAV \uac19\uc740 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \ub3c4\uad6c\ub97c \uc0ac\uc6a9\ud574 \uc2dc\uc2a4\ud15c \uac80\uc0ac.<\/li>\n\n\n\n<li>\uc545\uc131 \ud30c\uc77c\ub85c \ud655\uc778\ub418\uba74 \uc2e4\ud589 \uad8c\ud55c \uc81c\uac70 \ubc0f \uc0ad\uc81c.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub7f0 \uc808\ucc28\ub97c \ud1b5\ud574 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\ub4e4\uc774 \uc545\uc131\ucf54\ub4dc\uc778\uc9c0 \ud655\uc778\ud558\uace0 \uc801\uc808\ud55c \uc870\uce58\ub97c \ucde8\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Trojan:Linux\/CoinMiner.K \uc774\uac70\ub77c\ub294\ub370 \uc5b4\ub5a1\ud558\uc9c0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>Trojan:Linux\/CoinMiner.K<\/code>\ub294 \ub9ac\ub205\uc2a4 \uae30\ubc18\uc5d0\uc11c \uc554\ud638\ud654\ud3d0\ub97c \ucc44\uad74\ud558\ub294 \uc545\uc131\ucf54\ub4dc(Trojan)\uc785\ub2c8\ub2e4. \uc774 \ud2b8\ub85c\uc774 \ubaa9\ub9c8\ub294 \uac10\uc5fc\ub41c \uc2dc\uc2a4\ud15c\uc758 \ub9ac\uc18c\uc2a4\ub97c \uc0ac\uc6a9\ud574 \uc554\ud638\ud654\ud3d0\ub97c \ucc44\uad74\ud558\uc5ec, \uc2dc\uc2a4\ud15c \uc131\ub2a5\uc744 \uc800\ud558\uc2dc\ud0a4\uace0 \uacfc\ub3c4\ud55c \uc804\ub825 \uc18c\ube44\ub97c \ucd08\ub798\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \uc81c\uac70\ud558\uace0 \uc2dc\uc2a4\ud15c\uc744 \ubcf4\ud638\ud558\uae30 \uc704\ud574 \uc544\ub798 \ub2e8\uacc4\ub97c \ub530\ub77c \uc870\uce58\ud558\uc138\uc694.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. <strong>\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4 \uc885\ub8cc<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc554\ud638\ud654\ud3d0 \ucc44\uad74 \ud2b8\ub85c\uc774 \ubaa9\ub9c8\ub294 <code>coinminer<\/code>, <code>xmrig<\/code>, <code>minerd<\/code> \ub4f1\uacfc \uac19\uc740 \uc774\ub984\uc758 \ud504\ub85c\uc138\uc2a4\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc2e4\ud589 \uc911\uc778 \ubaa8\ub4e0 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4\ub97c \ud655\uc778\ud558\uace0 \uc885\ub8cc\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>ps aux | grep -i 'coinminer\\|xmrig\\|minerd'\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704 \uba85\ub839\uc73c\ub85c \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud504\ub85c\uc138\uc2a4\uc758 PID\ub97c \ucc3e\uc740 \ub2e4\uc74c, \uc544\ub798 \uba85\ub839\uc73c\ub85c \uc885\ub8cc\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo kill -9 &lt;PID&gt;\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2. <strong>\ud30c\uc77c \uc0ad\uc81c<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud574\ub2f9 \ud2b8\ub85c\uc774 \ubaa9\ub9c8\ub294 <code>\/tmp<\/code> \ub514\ub809\ud1a0\ub9ac\ub098 \uc228\uaca8\uc9c4 \ub514\ub809\ud1a0\ub9ac\uc5d0\uc11c \uc2e4\ud589 \ud30c\uc77c\uc744 \ub9cc\ub4e4\uc5b4 \ub450\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc2b5\ub2c8\ub2e4. <code>\/tmp<\/code>, <code>\/var\/tmp<\/code>, \uc0ac\uc6a9\uc790 \ud648 \ub514\ub809\ud1a0\ub9ac\uc758 \uc228\uae40 \ud30c\uc77c \ub4f1\uc744 \ud655\uc778\ud558\uace0 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c\ub4e4\uc744 \uc0ad\uc81c\ud558\uc138\uc694.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo rm -rf \/tmp\/* \/var\/tmp\/*\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3. <strong>\uc0ac\uc6a9\uc790 \uacc4\uc815 \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud2b8\ub85c\uc774 \ubaa9\ub9c8\uac00 \ub8e8\ud2b8 \uad8c\ud55c\uc73c\ub85c \uc124\uce58\ub418\uc5c8\ub2e4\uba74, \uc545\uc131 \uc0ac\uc6a9\uc790\uac00 \uc2dc\uc2a4\ud15c\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\ub3c4\ub85d \uc0c8\ub85c\uc6b4 \uc0ac\uc6a9\uc790 \uacc4\uc815\uc744 \ucd94\uac00\ud588\uc744 \uac00\ub2a5\uc131\uc774 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c \uba85\ub839\uc744 \uc0ac\uc6a9\ud574 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \uc0ac\uc6a9\uc790 \uacc4\uc815\uc774 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uace0 \uc0ad\uc81c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo cat \/etc\/passwd\nsudo userdel -r &lt;\uc0ac\uc6a9\uc790\uba85&gt;\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">4. <strong>\uc608\uc57d\ub41c \uc791\uc5c5 \ud655\uc778 (Crontab)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud2b8\ub85c\uc774 \ubaa9\ub9c8\ub294 \uac10\uc5fc \ud6c4 \uc9c0\uc18d\uc801\uc73c\ub85c \uc2e4\ud589\ub418\uae30 \uc704\ud574 <code>cron<\/code> \uc791\uc5c5\uc5d0 \ucd94\uac00\ub429\ub2c8\ub2e4. <code>cron<\/code>\uc5d0 \ub4f1\ub85d\ub41c \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \uc791\uc5c5\uc774 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uace0 \uc81c\uac70\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\uc0ac\uc6a9\uc790\ubcc4 <code>crontab<\/code> \ud655\uc778:bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo crontab -l sudo crontab -u postgres -l<\/code><\/li>\n\n\n\n<li>\uc2dc\uc2a4\ud15c <code>cron<\/code> \ud655\uc778:bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo cat \/etc\/crontab sudo ls \/etc\/cron.*<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \uc791\uc5c5\uc774 \uc788\ub2e4\uba74 \ub2e4\uc74c \uba85\ub839\uc73c\ub85c \uc0ad\uc81c\ud558\uc138\uc694.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo crontab -e\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">5. <strong>ClamAV\ub85c \uc804\uccb4 \uc2dc\uc2a4\ud15c \uac80\uc0ac<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">ClamAV\ub97c \uc124\uce58\ud558\uc5ec \uc2dc\uc2a4\ud15c \uc804\uccb4\ub97c \uac80\uc0ac\ud558\uace0 \uc545\uc131 \ud30c\uc77c\uc744 \uc81c\uac70\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo apt update\nsudo apt install clamav\nsudo freshclam  # \ubc14\uc774\ub7ec\uc2a4 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc5c5\ub370\uc774\ud2b8\nsudo clamscan -r --remove \/  # \uc804\uccb4 \uc2dc\uc2a4\ud15c \uac80\uc0ac \ubc0f \uac10\uc5fc \ud30c\uc77c \uc81c\uac70\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">6. <strong>\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0 \ud655\uc778 \ubc0f \ucc28\ub2e8<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ud2b8\ub85c\uc774 \ubaa9\ub9c8\uac00 \uc678\ubd80 \uc11c\ubc84\uc5d0 \uc5f0\uacb0\ud558\uc5ec \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. <code>netstat<\/code> \uba85\ub839\uc73c\ub85c \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc744 \ud655\uc778\ud558\uace0 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 IP \uc8fc\uc18c\ub97c \ucc28\ub2e8\ud558\uc138\uc694.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo netstat -tulnp\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9cc\uc57d \uc758\uc2ec\uc2a4\ub7ec\uc6b4 IP \uc8fc\uc18c\uac00 \ud655\uc778\ub418\uba74, <code>iptables<\/code>\ub97c \uc0ac\uc6a9\ud574 \ud574\ub2f9 IP \uc8fc\uc18c\ub97c \ucc28\ub2e8\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo iptables -A OUTPUT -d &lt;\uc758\uc2ec\uc2a4\ub7ec\uc6b4 IP \uc8fc\uc18c&gt; -j DROP\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">7. <strong>\uc2dc\uc2a4\ud15c \ub85c\uadf8 \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uce68\ud22c \ubc0f \ud65c\ub3d9 \ud754\uc801\uc744 \ucd94\uc801\ud558\uae30 \uc704\ud574 <code>\/var\/log\/auth.log<\/code>, <code>\/var\/log\/syslog<\/code> \ub4f1\uc744 \ud655\uc778\ud558\uc138\uc694.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo cat \/var\/log\/auth.log\nsudo cat \/var\/log\/syslog\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">8. <strong>\ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8 \ubc0f \ubcf4\uc548 \ud328\uce58<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2dc\uc2a4\ud15c\uc758 \ubcf4\uc548 \ucde8\uc57d\uc810\uc744 \ub9c9\uae30 \uc704\ud574 \ubaa8\ub4e0 \ud328\ud0a4\uc9c0\ub97c \ucd5c\uc2e0 \ubc84\uc804\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ud558\uc138\uc694.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo apt update &amp;&amp; sudo apt upgrade -y\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">9. <strong>\ube44\ubc00\ubc88\ud638 \ubcc0\uacbd<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ubaa8\ub4e0 \uc0ac\uc6a9\uc790 \uacc4\uc815\uc758 \ube44\ubc00\ubc88\ud638\ub97c \ubcc0\uacbd\ud574, \uc678\ubd80 \uce68\uc785 \uac00\ub2a5\uc131\uc744 \ucd5c\uc18c\ud654\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">10. <strong>\ucd94\uac00\uc801\uc778 \ubcf4\ud638 \uc870\uce58<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\ubcf4\uc548\uc744 \uc704\ud574 \ubcf4\uc548 \uadf8\ub8f9\uc744 \uc124\uc815\ud558\uace0, \ud544\uc694 \uc2dc\uc5d0\ub294 \ubc31\uc5c5 \ud6c4 OS\ub97c \uc7ac\uc124\uce58\ud558\ub294 \uac83\uc774 \ucd5c\uc120\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uc870\uce58\ub4e4\ub85c\ub3c4 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud65c\ub3d9\uc774 \uacc4\uc18d\ub418\uba74, \uac10\uc5fc\uc774 \uc9c0\uc18d\ub418\uc5c8\uc744 \uac00\ub2a5\uc131\uc774 \uc788\uc73c\ubbc0\ub85c \uc2dc\uc2a4\ud15c\uc744 \ubc31\uc5c5\ud558\uace0 \ucd08\uae30\ud654\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>postgre \uacc4\uc815\ub3c4 \uc0ad\uc81c\ud558\uace0 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub3c4 \uc0ad\uc81c\ud558\uace0 \uad00\ub828 \ubaa8\ub4e0 \ub370\uc774\ud130\ub3c4 \uc9c0\uc6b0\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c\ud574?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PostgreSQL \uacc4\uc815\uacfc \ub370\uc774\ud130\ubca0\uc774\uc2a4, \uadf8\ub9ac\uace0 \uad00\ub828 \ub370\uc774\ud130\uae4c\uc9c0 \uc644\uc804\ud788 \uc0ad\uc81c\ud558\ub824\uba74 \uc544\ub798\uc758 \ub2e8\uacc4\ub97c \uc21c\uc11c\ub300\ub85c \uc218\ud589\ud558\uc2dc\uba74 \ub429\ub2c8\ub2e4. \uc774 \uacfc\uc815\uc740 PostgreSQL \uc11c\ubc84\uc640 \ubaa8\ub4e0 \ub370\uc774\ud130 \ud30c\uc77c\uc744 \uc0ad\uc81c\ud558\ubbc0\ub85c \uc8fc\uc758\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. <strong>PostgreSQL \uc11c\ube44\uc2a4 \uc911\uc9c0<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\uba3c\uc800 PostgreSQL \uc11c\ubc84\ub97c \uc911\uc9c0\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo systemctl stop postgresql\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ub294 \uc11c\ube44\uc2a4 \uc774\ub984\uc5d0 \ub530\ub77c \uc544\ub798 \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo service postgresql stop\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2. <strong><code>postgres<\/code> \uacc4\uc815 \uc0ad\uc81c<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PostgreSQL \uc124\uce58 \uc2dc \uc0dd\uc131\ub41c \uc2dc\uc2a4\ud15c \uc0ac\uc6a9\uc790 \uacc4\uc815 <code>postgres<\/code>\ub97c \uc0ad\uc81c\ud569\ub2c8\ub2e4. \uc774 \uacc4\uc815\uc744 \uc0ad\uc81c\ud558\uba74 \ud574\ub2f9 \uacc4\uc815\uc774 \uc18c\uc720\ud55c \ud30c\uc77c\ub3c4 \uc0ad\uc81c\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo userdel -r postgres\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>-r<\/code> \uc635\uc158\uc740 <code>postgres<\/code> \uacc4\uc815\uc758 \ud648 \ub514\ub809\ud1a0\ub9ac \ubc0f \uc18c\uc720\ud55c \ud30c\uc77c\ub3c4 \ud568\uaed8 \uc0ad\uc81c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. <strong>PostgreSQL \ub370\uc774\ud130 \ub514\ub809\ud1a0\ub9ac \ubc0f \ub85c\uadf8 \ud30c\uc77c \uc0ad\uc81c<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PostgreSQL\uc758 \ubaa8\ub4e0 \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc640 \ub370\uc774\ud130\ub294 \uc77c\ubc18\uc801\uc73c\ub85c <code>\/var\/lib\/postgresql\/<\/code> \ub514\ub809\ud1a0\ub9ac\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4. PostgreSQL\uc744 \uc0ad\uc81c\ud558\uace0 \ub098\uba74 \uc774 \ub514\ub809\ud1a0\ub9ac\ub97c \uc0ad\uc81c\ud558\uc5ec \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud30c\uc77c\uc744 \uc81c\uac70\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo rm -rf \/var\/lib\/postgresql\/\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c, PostgreSQL \ub85c\uadf8 \ud30c\uc77c\uc774 <code>\/var\/log\/postgresql\/<\/code>\uc5d0 \uc788\ub2e4\uba74, \ud574\ub2f9 \ub85c\uadf8 \ud30c\uc77c\ub3c4 \uc0ad\uc81c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo rm -rf \/var\/log\/postgresql\/\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">4. <strong>PostgreSQL \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc0ad\uc81c<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PostgreSQL \ud328\ud0a4\uc9c0\ub97c \uc0ad\uc81c\ud558\uc5ec \uad00\ub828 \ud30c\uc77c\ub4e4\uc744 \ubaa8\ub450 \uc81c\uac70\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">\uc6b0\ubd84\ud22c\/Debian \uae30\ubc18 \uc2dc\uc2a4\ud15c\uc5d0\uc11c PostgreSQL \uc81c\uac70<\/h4>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo apt-get --purge remove postgresql*\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>--purge<\/code> \uc635\uc158\uc744 \uc0ac\uc6a9\ud558\uba74 PostgreSQL \uad00\ub828 \uc124\uc815 \ud30c\uc77c\ub3c4 \uc0ad\uc81c\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">CentOS\/RHEL \uae30\ubc18 \uc2dc\uc2a4\ud15c\uc5d0\uc11c PostgreSQL \uc81c\uac70<\/h4>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo yum remove postgresql*\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">5. <strong>\ub0a8\uc740 \uad6c\uc131 \ud30c\uc77c \ud655\uc778 \ubc0f \uc0ad\uc81c<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PostgreSQL\uc758 \uc124\uc815 \ud30c\uc77c\uc774\ub098 \uad00\ub828 \ud30c\uc77c\uc774 <code>\/etc\/postgresql\/<\/code>\uc5d0 \ub0a8\uc544 \uc788\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud574\ub2f9 \ub514\ub809\ud1a0\ub9ac\uac00 \uc874\uc7ac\ud558\uba74 \uc0ad\uc81c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>sudo rm -rf \/etc\/postgresql\/\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">6. <strong>\uc2dc\uc2a4\ud15c\uc5d0\uc11c PostgreSQL \ud655\uc778<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PostgreSQL\uc774 \uc644\uc804\ud788 \uc0ad\uc81c\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4. <code>psql<\/code> \uba85\ub839\uc5b4\uac00 \uc791\ub3d9\ud558\uc9c0 \uc54a\uc73c\uba74 PostgreSQL\uc774 \uc131\uacf5\uc801\uc73c\ub85c \uc81c\uac70\ub41c \uac83\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">bash\ucf54\ub4dc \ubcf5\uc0ac<code>psql\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9cc\uc57d PostgreSQL \uad00\ub828 \ud30c\uc77c\uc774\ub098 \ud504\ub85c\uc138\uc2a4\uac00 \uc5ec\uc804\ud788 \ubc1c\uacac\ub41c\ub2e4\uba74, \uac01 \ub514\ub809\ud1a0\ub9ac\ub97c \ub2e4\uc2dc \ud55c \ubc88 \ud655\uc778\ud558\uace0 \uc0ad\uc81c\ud574 \uc8fc\uc138\uc694.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ub2e8\uacc4\ub97c \ud1b5\ud574 PostgreSQL\uacfc \uad00\ub828\ub41c \ubaa8\ub4e0 \ub370\uc774\ud130, \uc0ac\uc6a9\uc790 \uacc4\uc815, \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud30c\uc77c\uc774 \uc644\uc804\ud788 \uc0ad\uc81c\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ucc38\uace0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/si.mpli.st\/dev\/2018-04-15-cryptominer-inside-postgres\">https:\/\/si.mpli.st\/dev\/2018-04-15-cryptominer-inside-postgres<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uacb0\uad6d \ub098\uac19\uc740 \uacbd\uc6b0\uc5d0\ub294 postgres \uacc4\uc815 \uc0ad\uc81c, db \uc0ad\uc81c, \uad00\ub828 \ubaa8\ub4e0 \ud30c\uc77c \uc0ad\uc81c \ubc0f clamscan \uc744 \uc804\uccb4 \ucef4\ud4e8\ud130\uc5d0 \ub300\ud574\uc11c \uc2e4\ud589\ud588\uace0 clamscan\uc5d0\uc11c tmp\uc5d0 \uc788\ub358 \uc774\uc0c1\ud55c \ud30c\uc77c\ub4e4\uae4c\uc9c0\ub3c4 \uc0ad\uc81c , \ube44\ubc88 \ubcc0\uacbd \ubc0f \ubc29\ud654\ubcbd \uac15\ud654 \ub4f1\uc744 \ud588\ub2e4.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\uc6b0\uc5f0\ud788 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc5d0 top \uba85\ub839\uc744 \uccd0\ubcf4\ub2c8 \uc774\uc0c1\ud55c \ud504\ub85c\uc138\uc11c\uac00 \uc5c4\uccad\ub098\uac8c cpu\ub97c \uc7a1\uc544\uba39\uace0 \uc788\uc5c8\ub2e4. md5\ub85c \uac80\uc0c9\ud574\ubcf8 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c : 8f96e8b4e9d26884c776c1b42a70bae5 https:\/\/otx.alienvault.com\/indicator\/file\/5e5fd0bc5f1bd663d7ccc2695c2b56bd382df3c7fdac605eb0ce3c0d5df24dc4 \uc774\ud558\ub294 \ud574\uacb0 \uacfc\uc815 \ud574\ub2f9 \ud504\ub85c\uc138\uc2a4\uac00 \uc758\uc2ec\uc2a4\ub7ec\uc6cc \ubcf4\uc785\ub2c8\ub2e4. \/tmp\/.\/.kGX8ucb \uac19\uc740 \uacbd\ub85c\uc640 \ud30c\uc77c \uc774\ub984\uc740 \ubcf4\ud1b5 \uc815\uc0c1\uc801\uc778 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uac00 \uc0ac\uc6a9\ud558\ub294 \ud615\uc2dd\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uc774\ub294 \uc545\uc131 \ucf54\ub4dc\ub098 \ud574\ud0b9\uc758 \uc77c\ubd80\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc0c1\ud669\uc5d0\uc11c \ube60\ub974\uac8c \uc870\uce58\ud574\uc57c \ud560 \uba87 \uac00\uc9c0 \ub2e8\uacc4\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4. \uc0c1\ud669\uc5d0 &hellip; <a href=\"https:\/\/atmokpo.com\/w\/24131\/\" class=\"more-link\">\ub354 \ubcf4\uae30<span class=\"screen-reader-text\"> &#8220;\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-24131","post","type-post","status-publish","format-standard","hentry","category-4"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9 - \ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atmokpo.com\/w\/24131\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9 - \ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8\" \/>\n<meta property=\"og:description\" content=\"\uc6b0\uc5f0\ud788 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc5d0 top \uba85\ub839\uc744 \uccd0\ubcf4\ub2c8 \uc774\uc0c1\ud55c \ud504\ub85c\uc138\uc11c\uac00 \uc5c4\uccad\ub098\uac8c cpu\ub97c \uc7a1\uc544\uba39\uace0 \uc788\uc5c8\ub2e4. md5\ub85c \uac80\uc0c9\ud574\ubcf8 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c : 8f96e8b4e9d26884c776c1b42a70bae5 https:\/\/otx.alienvault.com\/indicator\/file\/5e5fd0bc5f1bd663d7ccc2695c2b56bd382df3c7fdac605eb0ce3c0d5df24dc4 \uc774\ud558\ub294 \ud574\uacb0 \uacfc\uc815 \ud574\ub2f9 \ud504\ub85c\uc138\uc2a4\uac00 \uc758\uc2ec\uc2a4\ub7ec\uc6cc \ubcf4\uc785\ub2c8\ub2e4. \/tmp\/.\/.kGX8ucb \uac19\uc740 \uacbd\ub85c\uc640 \ud30c\uc77c \uc774\ub984\uc740 \ubcf4\ud1b5 \uc815\uc0c1\uc801\uc778 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uac00 \uc0ac\uc6a9\ud558\ub294 \ud615\uc2dd\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uc774\ub294 \uc545\uc131 \ucf54\ub4dc\ub098 \ud574\ud0b9\uc758 \uc77c\ubd80\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc0c1\ud669\uc5d0\uc11c \ube60\ub974\uac8c \uc870\uce58\ud574\uc57c \ud560 \uba87 \uac00\uc9c0 \ub2e8\uacc4\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4. \uc0c1\ud669\uc5d0 &hellip; \ub354 \ubcf4\uae30 &quot;\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9&quot;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/atmokpo.com\/w\/24131\/\" \/>\n<meta property=\"og:site_name\" content=\"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-25T13:40:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-26T08:04:11+00:00\" \/>\n<meta name=\"author\" content=\"root\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@bebubo4\" \/>\n<meta name=\"twitter:site\" content=\"@bebubo4\" \/>\n<meta name=\"twitter:label1\" content=\"\uae00\uc4f4\uc774\" \/>\n\t<meta name=\"twitter:data1\" content=\"root\" \/>\n\t<meta name=\"twitter:label2\" content=\"\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04\" \/>\n\t<meta name=\"twitter:data2\" content=\"3\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/atmokpo.com\/w\/24131\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/atmokpo.com\/w\/24131\/\"},\"author\":{\"name\":\"root\",\"@id\":\"https:\/\/atmokpo.com\/w\/#\/schema\/person\/91b6b3b138fbba0efb4ae64b1abd81d7\"},\"headline\":\"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9\",\"datePublished\":\"2024-10-25T13:40:14+00:00\",\"dateModified\":\"2024-11-26T08:04:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/atmokpo.com\/w\/24131\/\"},\"wordCount\":116,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/atmokpo.com\/w\/#organization\"},\"articleSection\":[\"\uae30\uc220\uad00\ub828\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/atmokpo.com\/w\/24131\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/atmokpo.com\/w\/24131\/\",\"url\":\"https:\/\/atmokpo.com\/w\/24131\/\",\"name\":\"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9 - \ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8\",\"isPartOf\":{\"@id\":\"https:\/\/atmokpo.com\/w\/#website\"},\"datePublished\":\"2024-10-25T13:40:14+00:00\",\"dateModified\":\"2024-11-26T08:04:11+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/atmokpo.com\/w\/24131\/#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/atmokpo.com\/w\/24131\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/atmokpo.com\/w\/24131\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\/\/atmokpo.com\/w\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/atmokpo.com\/w\/#website\",\"url\":\"https:\/\/atmokpo.com\/w\/\",\"name\":\"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/atmokpo.com\/w\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/atmokpo.com\/w\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/atmokpo.com\/w\/#organization\",\"name\":\"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8\",\"url\":\"https:\/\/atmokpo.com\/w\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/atmokpo.com\/w\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/atmokpo.com\/w\/wp-content\/uploads\/2024\/11\/logo.png\",\"contentUrl\":\"https:\/\/atmokpo.com\/w\/wp-content\/uploads\/2024\/11\/logo.png\",\"width\":400,\"height\":400,\"caption\":\"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8\"},\"image\":{\"@id\":\"https:\/\/atmokpo.com\/w\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/bebubo4\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/atmokpo.com\/w\/#\/schema\/person\/91b6b3b138fbba0efb4ae64b1abd81d7\",\"name\":\"root\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/atmokpo.com\/w\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/708197b41fc6435a7ce22d951b25d4a47e9e904270cb1f04682d4f025066f80c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/708197b41fc6435a7ce22d951b25d4a47e9e904270cb1f04682d4f025066f80c?s=96&d=mm&r=g\",\"caption\":\"root\"},\"sameAs\":[\"http:\/\/atmokpo.com\/w\"],\"url\":\"https:\/\/atmokpo.com\/w\/author\/root\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9 - \ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atmokpo.com\/w\/24131\/","og_locale":"ko_KR","og_type":"article","og_title":"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9 - \ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8","og_description":"\uc6b0\uc5f0\ud788 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc5d0 top \uba85\ub839\uc744 \uccd0\ubcf4\ub2c8 \uc774\uc0c1\ud55c \ud504\ub85c\uc138\uc11c\uac00 \uc5c4\uccad\ub098\uac8c cpu\ub97c \uc7a1\uc544\uba39\uace0 \uc788\uc5c8\ub2e4. md5\ub85c \uac80\uc0c9\ud574\ubcf8 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud30c\uc77c : 8f96e8b4e9d26884c776c1b42a70bae5 https:\/\/otx.alienvault.com\/indicator\/file\/5e5fd0bc5f1bd663d7ccc2695c2b56bd382df3c7fdac605eb0ce3c0d5df24dc4 \uc774\ud558\ub294 \ud574\uacb0 \uacfc\uc815 \ud574\ub2f9 \ud504\ub85c\uc138\uc2a4\uac00 \uc758\uc2ec\uc2a4\ub7ec\uc6cc \ubcf4\uc785\ub2c8\ub2e4. \/tmp\/.\/.kGX8ucb \uac19\uc740 \uacbd\ub85c\uc640 \ud30c\uc77c \uc774\ub984\uc740 \ubcf4\ud1b5 \uc815\uc0c1\uc801\uc778 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uac00 \uc0ac\uc6a9\ud558\ub294 \ud615\uc2dd\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uc774\ub294 \uc545\uc131 \ucf54\ub4dc\ub098 \ud574\ud0b9\uc758 \uc77c\ubd80\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc0c1\ud669\uc5d0\uc11c \ube60\ub974\uac8c \uc870\uce58\ud574\uc57c \ud560 \uba87 \uac00\uc9c0 \ub2e8\uacc4\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4. \uc0c1\ud669\uc5d0 &hellip; \ub354 \ubcf4\uae30 \"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9\"","og_url":"https:\/\/atmokpo.com\/w\/24131\/","og_site_name":"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8","article_published_time":"2024-10-25T13:40:14+00:00","article_modified_time":"2024-11-26T08:04:11+00:00","author":"root","twitter_card":"summary_large_image","twitter_creator":"@bebubo4","twitter_site":"@bebubo4","twitter_misc":{"\uae00\uc4f4\uc774":"root","\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04":"3\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/atmokpo.com\/w\/24131\/#article","isPartOf":{"@id":"https:\/\/atmokpo.com\/w\/24131\/"},"author":{"name":"root","@id":"https:\/\/atmokpo.com\/w\/#\/schema\/person\/91b6b3b138fbba0efb4ae64b1abd81d7"},"headline":"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9","datePublished":"2024-10-25T13:40:14+00:00","dateModified":"2024-11-26T08:04:11+00:00","mainEntityOfPage":{"@id":"https:\/\/atmokpo.com\/w\/24131\/"},"wordCount":116,"commentCount":0,"publisher":{"@id":"https:\/\/atmokpo.com\/w\/#organization"},"articleSection":["\uae30\uc220\uad00\ub828"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/atmokpo.com\/w\/24131\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/atmokpo.com\/w\/24131\/","url":"https:\/\/atmokpo.com\/w\/24131\/","name":"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9 - \ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8","isPartOf":{"@id":"https:\/\/atmokpo.com\/w\/#website"},"datePublished":"2024-10-25T13:40:14+00:00","dateModified":"2024-11-26T08:04:11+00:00","breadcrumb":{"@id":"https:\/\/atmokpo.com\/w\/24131\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/atmokpo.com\/w\/24131\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/atmokpo.com\/w\/24131\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/atmokpo.com\/w\/en\/"},{"@type":"ListItem","position":2,"name":"\uc6b0\ubd84\ud22c postgres \uacc4\uc815 \ucf54\uc778 \ub9c8\uc774\ub108 \ud574\ud0b9"}]},{"@type":"WebSite","@id":"https:\/\/atmokpo.com\/w\/#website","url":"https:\/\/atmokpo.com\/w\/","name":"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8","description":"","publisher":{"@id":"https:\/\/atmokpo.com\/w\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atmokpo.com\/w\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/atmokpo.com\/w\/#organization","name":"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8","url":"https:\/\/atmokpo.com\/w\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/atmokpo.com\/w\/#\/schema\/logo\/image\/","url":"https:\/\/atmokpo.com\/w\/wp-content\/uploads\/2024\/11\/logo.png","contentUrl":"https:\/\/atmokpo.com\/w\/wp-content\/uploads\/2024\/11\/logo.png","width":400,"height":400,"caption":"\ub77c\uc774\ube0c\uc2a4\ub9c8\ud2b8"},"image":{"@id":"https:\/\/atmokpo.com\/w\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/bebubo4"]},{"@type":"Person","@id":"https:\/\/atmokpo.com\/w\/#\/schema\/person\/91b6b3b138fbba0efb4ae64b1abd81d7","name":"root","image":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/atmokpo.com\/w\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/708197b41fc6435a7ce22d951b25d4a47e9e904270cb1f04682d4f025066f80c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/708197b41fc6435a7ce22d951b25d4a47e9e904270cb1f04682d4f025066f80c?s=96&d=mm&r=g","caption":"root"},"sameAs":["http:\/\/atmokpo.com\/w"],"url":"https:\/\/atmokpo.com\/w\/author\/root\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/posts\/24131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/comments?post=24131"}],"version-history":[{"count":3,"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/posts\/24131\/revisions"}],"predecessor-version":[{"id":24138,"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/posts\/24131\/revisions\/24138"}],"wp:attachment":[{"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/media?parent=24131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/categories?post=24131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atmokpo.com\/w\/wp-json\/wp\/v2\/tags?post=24131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}