{"id":5165,"date":"2022-02-18T13:17:18","date_gmt":"2022-02-18T16:17:18","guid":{"rendered":"https:\/\/blog.clusterweb.com.br\/?p=5165"},"modified":"2022-02-18T13:18:10","modified_gmt":"2022-02-18T16:18:10","slug":"protecao-no-cloudflare-para-wordpress-contra-ataque-de-forca-bruta","status":"publish","type":"post","link":"https:\/\/blog.clusterweb.com.br\/?p=5165","title":{"rendered":"Prote\u00e7\u00e3o no Cloudflare para WordPress contra ataque de for\u00e7a bruta"},"content":{"rendered":"<p>O WordPress estabelece uma s\u00e9rie de configura\u00e7\u00f5es padr\u00f5es que acabam sendo comuns\/iguais para diversas instala\u00e7\u00f5es. Invasores sempre testam as plataformas usadas pelas v\u00edtimas e assim acabam conhecendo toda a estrutura padr\u00e3o do site que pretendem atacar. Levando isso em considera\u00e7\u00e3o, qualquer invasor ou at\u00e9 mesmo usu\u00e1rio sabe que o endere\u00e7o padr\u00e3o para a p\u00e1gina de login do WordPress que \u00e9 a\u00a0<a class=\"vglnk\" href=\"http:\/\/seudominio.com.br\/wp-login.php\" rel=\"nofollow\">seudominio.com.br\/wp-login.php<\/a>.<\/p>\n<p>Proteger a p\u00e1gina de login do WordPress \u00e9 crucial para manter seu site seguro! Descubra deste artigo como solucionar de uma vez por todas esses problemas de ataques em seu wp-login.php!<\/p>\n<p><!--more--><\/p>\n<p>Neste ponto, precisamos que seu site esteja configurado no CloudFlare e totalmente propagado, caso contr\u00e1rio a solu\u00e7\u00e3o n\u00e3o ir\u00e1 funcionar. Acesse sua conta no CloudFlare e clique no menu\u00a0<strong>Firewall<\/strong>:<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-3947 litespeed-loaded\" src=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1.jpg.webp\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" srcset=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1.jpg.webp 1600w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1-768x402.jpg.webp 768w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1-1536x804.jpg.webp 1536w\" alt=\"\" width=\"1600\" height=\"838\" data-lazyloaded=\"1\" data-src=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1.jpg.webp\" data-srcset=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1.jpg.webp 1600w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1-768x402.jpg.webp 768w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-1-1536x804.jpg.webp 1536w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" data-was-processed=\"true\" \/><\/figure>\n<p>Nesta nova tela, clique no submenu\u00a0<strong>Firewall Rules<\/strong>\u00a0e em seguida\u00a0<strong>Create a Firewall rule<\/strong>:<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-3948 litespeed-loaded\" src=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2.jpg.webp\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" srcset=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2.jpg.webp 1600w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2-768x449.jpg.webp 768w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2-1536x898.jpg.webp 1536w\" alt=\"\" width=\"1600\" height=\"935\" data-lazyloaded=\"1\" data-src=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2.jpg.webp\" data-srcset=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2.jpg.webp 1600w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2-768x449.jpg.webp 768w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-2-1536x898.jpg.webp 1536w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" data-was-processed=\"true\" \/><\/figure>\n<p>Configure a regra da seguinte forma e clique em\u00a0<strong>Deploy<\/strong>\u00a0para finalizar:<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-3949 litespeed-loaded\" src=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3.jpg.webp\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" srcset=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3.jpg.webp 1600w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3-768x583.jpg.webp 768w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3-1536x1165.jpg.webp 1536w\" alt=\"\" width=\"1600\" height=\"1214\" data-lazyloaded=\"1\" data-src=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3.jpg.webp\" data-srcset=\"https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3.jpg.webp 1600w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3-768x583.jpg.webp 768w, https:\/\/hostseries.com.br\/wp-content\/uploads\/2020\/03\/cloudflare-3-1536x1165.jpg.webp 1536w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" data-was-processed=\"true\" \/><\/figure>\n<p>A regra basicamente ir\u00e1 verificar se a\u00a0<strong>URI<\/strong>\u00a0<strong>contem<\/strong>\u00a0<strong>WP-ADMIN<\/strong>\u00a0ou se a\u00a0<strong>URI contem WP-LOGIN.PHP<\/strong>, se\u00a0<strong>HOUVER<\/strong>\u00a0ele ir\u00e1 solicitar o\u00a0<strong>CHALLENGE<\/strong>\u00a0que nada mais \u00e9 do que um captcha avan\u00e7ado do CloudFlare.<\/p>\n<p>Como a solicita\u00e7\u00e3o do captcha vem da CDN (CloudFlare) os recursos do seu ambiente de hospedagem ser\u00e3o poupados, e s\u00f3 chegar\u00e1 at\u00e9 ao wp-admin os usu\u00e1rios que passarem pelo captcha, ou seja, o ataque n\u00e3o ir\u00e1 conseguir passar.<\/p>\n<p>Se isso lhe ajudou, compartilhe com a comunidade para que mais devs saibam como \u00e9 simples resolver este problema.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>O WordPress estabelece uma s\u00e9rie de configura\u00e7\u00f5es padr\u00f5es que acabam sendo comuns\/iguais para diversas instala\u00e7\u00f5es. Invasores sempre testam as plataformas usadas pelas v\u00edtimas e assim acabam conhecendo toda a estrutura padr\u00e3o do site que pretendem atacar. Levando isso em considera\u00e7\u00e3o, qualquer invasor ou at\u00e9 mesmo usu\u00e1rio sabe que o endere\u00e7o padr\u00e3o para a p\u00e1gina de [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[455,1082,730,1,830,79,725,42,51,1301,495,85,68,271,548,874],"tags":[1559,1561,852,1558,353,1560,361,355,1557,435],"class_list":["post-5165","post","type-post","status-publish","format-standard","hentry","category-apache2","category-centos-7-rhel-7","category-clusterweb","category-viazap","category-debian","category-firewall","category-hospedagem","category-leitura-recomendada","category-linux-linuxrs","category-nuvens","category-profissional-de-ti","category-proxy","category-redes-2","category-seguranca-2","category-ubuntu-2","category-wordpress","tag-ataque","tag-bruta","tag-cloudflare","tag-contra","tag-de","tag-forca","tag-no","tag-para","tag-protecao","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/5165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5165"}],"version-history":[{"count":2,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/5165\/revisions"}],"predecessor-version":[{"id":5167,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/5165\/revisions\/5167"}],"wp:attachment":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}