{"id":262,"date":"2026-06-22T11:35:20","date_gmt":"2026-06-22T14:35:20","guid":{"rendered":"https:\/\/flowspec.net.br\/blog\/?p=262"},"modified":"2026-07-02T11:39:15","modified_gmt":"2026-07-02T14:39:15","slug":"upload-identificado-na-rede-de-clientes","status":"publish","type":"post","link":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/","title":{"rendered":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Em uma an\u00e1lise recente de telemetria, identificamos um evento de <strong>tr\u00e1fego de sa\u00edda malicioso (upload attack)<\/strong> originado na faixa <strong>100.64.x.x<\/strong>, correspondente \u00e0 rede de clientes do provedor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Diferente de um ataque volum\u00e9trico tradicional de entrada, neste caso o comportamento observado mostra a rede interna <strong>gerando tr\u00e1fego para m\u00faltiplos destinos externos<\/strong>, com forte dispers\u00e3o de portas de origem e destino, o que caracteriza um cen\u00e1rio compat\u00edvel com <strong>hosts comprometidos, bots distribu\u00eddos ou abuso de aplica\u00e7\u00f5es expostas na base de clientes<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Principais evid\u00eancias observadas nos gr\u00e1ficos:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"517\" src=\"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ddos-post-grafana-1-1024x517.png\" alt=\"\" class=\"wp-image-265\" srcset=\"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ddos-post-grafana-1-1024x517.png 1024w, https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ddos-post-grafana-1-300x151.png 300w, https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ddos-post-grafana-1-768x388.png 768w, https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ddos-post-grafana-1.png 1536w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1) Origem do tr\u00e1fego concentrada na rede 100.64.x.x<\/strong><br>No painel de correla\u00e7\u00e3o entre IPs, os principais endere\u00e7os internos com maior volume de sa\u00edda foram:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>100.64.25.202<\/strong> com pico de <strong>7,12 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>100.64.25.201<\/strong> com pico de <strong>6,58 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>100.64.13.8<\/strong> com pico de <strong>5,97 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>100.64.14.3<\/strong> com pico de <strong>3,58 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>100.64.12.221<\/strong> com pico de <strong>2,59 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>100.64.18.26<\/strong> com pico de <strong>1,76 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>100.64.18.140<\/strong> com pico de <strong>1,47 Gb\/s<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Esse ponto \u00e9 o mais importante da an\u00e1lise: a volumetria parte de dentro da rede de clientes e segue para fora, ou seja, trata-se de <strong>incid\u00eancia de upload agressivo<\/strong>, e n\u00e3o de flood externo contra esses IPs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2) M\u00faltiplos destinos externos atingidos<\/strong><br>Os principais destinos externos observados nos picos foram:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>21.66.246.156<\/strong> com <strong>12,3 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>156.246.66.21<\/strong> com <strong>7,12 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>214.36.170.111<\/strong> com <strong>6,47 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>156.246.66.11<\/strong> com <strong>5,92 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>11.66.246.156<\/strong> com <strong>5,90 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>111.170.36.214<\/strong> com <strong>5,15 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>48.198.207.45<\/strong> com <strong>3,90 Gb\/s<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Tamb\u00e9m aparecem outros destinos relevantes, como:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>172.217.30.106<\/strong><\/li>\n\n\n\n<li><strong>193.151.109.179<\/strong><\/li>\n\n\n\n<li><strong>172.217.162.170<\/strong><\/li>\n\n\n\n<li><strong>172.217.29.175<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Isso mostra que o tr\u00e1fego n\u00e3o estava mirando um \u00fanico alvo, mas sim <strong>diversas redes externas simultaneamente<\/strong>, refor\u00e7ando o ind\u00edcio de comportamento automatizado ou coordenado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3) Principais portas de destino com maior incid\u00eancia<\/strong><br>No painel <strong>SOURCE.IP x DESTINATION.PORT<\/strong>, os maiores picos foram observados em:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>65353<\/strong> \u2192 <strong>19,4 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>80<\/strong> \u2192 <strong>11,6 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>443<\/strong> \u2192 <strong>3,84 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>27001<\/strong> \u2192 <strong>3,37 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>7777<\/strong> \u2192 <strong>2,60 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>53<\/strong> \u2192 <strong>1,39 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>9085<\/strong> \u2192 <strong>1,34 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>8443<\/strong> \u2192 <strong>1,19 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>3478<\/strong> \u2192 <strong>1,10 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>9036<\/strong> \u2192 <strong>954 Mb\/s<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A presen\u00e7a simult\u00e2nea de portas como <strong>80, 443, 53, 3478, 7777, 27001 e portas altas aleat\u00f3rias<\/strong> evidencia um padr\u00e3o de <strong>multiporta<\/strong>, incompat\u00edvel com tr\u00e1fego leg\u00edtimo concentrado em uma \u00fanica aplica\u00e7\u00e3o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4) Principais portas de origem identificadas<\/strong><br>No painel <strong>SOURCE.IP x SOURCE.PORT<\/strong>, os maiores volumes apareceram em:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>46539<\/strong> \u2192 <strong>7,12 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>2334<\/strong> \u2192 <strong>6,58 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>21680<\/strong> \u2192 <strong>5,97 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>40069<\/strong> \u2192 <strong>3,90 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>62619<\/strong> \u2192 <strong>3,56 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>10896<\/strong> \u2192 <strong>3,51 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>11972<\/strong> \u2192 <strong>3,37 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>44871<\/strong> \u2192 <strong>2,60 Gb\/s<\/strong><\/li>\n\n\n\n<li><strong>64216<\/strong> \u2192 <strong>797 Mb\/s<\/strong><\/li>\n\n\n\n<li><strong>63613<\/strong> \u2192 <strong>754 Mb\/s<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Esse comportamento sugere <strong>alta aleatoriza\u00e7\u00e3o das portas de origem<\/strong>, algo comum em dispositivos comprometidos, botnets e tr\u00e1fego automatizado gerado em massa.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Leitura t\u00e9cnica do incidente<\/strong><br>Com base nos dados observados, o evento apresenta as seguintes caracter\u00edsticas:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>tr\u00e1fego de sa\u00edda originado na base 100.64.x.x<\/strong><\/li>\n\n\n\n<li><strong>m\u00faltiplos IPs internos participando do envio<\/strong><\/li>\n\n\n\n<li><strong>diversos destinos externos simult\u00e2neos<\/strong><\/li>\n\n\n\n<li><strong>dispers\u00e3o entre portas conhecidas e portas altas<\/strong><\/li>\n\n\n\n<li><strong>picos expressivos de upload em curto intervalo<\/strong><\/li>\n\n\n\n<li><strong>forte ind\u00edcio de comprometimento distribu\u00eddo na rede de clientes<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Em outras palavras, trata-se de um cen\u00e1rio em que a rede do provedor deixa de ser apenas alvo e passa a ser tamb\u00e9m <strong>fonte de tr\u00e1fego abusivo<\/strong>, o que exige resposta r\u00e1pida para conter impacto operacional, reputacional e risco de bloqueios externos.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Conclus\u00e3o<\/strong><br>Eventos como esse refor\u00e7am um ponto cr\u00edtico para qualquer ISP:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>n\u00e3o basta monitorar ataque de entrada; \u00e9 obrigat\u00f3rio monitorar upload malicioso na base de clientes.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sem visibilidade por fluxo, correla\u00e7\u00e3o por IP e leitura por portas, esse tipo de incidente pode passar despercebido at\u00e9 causar:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>satura\u00e7\u00e3o de uplinks<\/li>\n\n\n\n<li>degrada\u00e7\u00e3o de qualidade para assinantes<\/li>\n\n\n\n<li>blacklists<\/li>\n\n\n\n<li>acionamentos por abuso<\/li>\n\n\n\n<li>dano reputacional para o ASN do provedor<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Quem monitora apenas consumo v\u00ea banda.<br>Quem monitora fluxo v\u00ea comprometimento.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">#DDoS #UploadAttack #CyberSecurity #ISP #NetFlow #NetworkSecurity #SOC #NOC #Telemetria #AntiDDoS #SegurancaDeRede<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Abra\u00e7o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Raphael<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes Em uma an\u00e1lise recente de telemetria, identificamos um evento de tr\u00e1fego de sa\u00edda malicioso (upload attack) originado na faixa 100.64.x.x, correspondente \u00e0 rede de clientes do provedor. Diferente de um ataque volum\u00e9trico tradicional de entrada, neste caso o comportamento observado mostra a rede interna [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":263,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,1],"tags":[12,13],"class_list":["post-262","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-protecao-contra-ataques-ddos","category-uncategorized","tag-banner-principal","tag-destaque"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes - Flowspec Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes - Flowspec Blog\" \/>\n<meta property=\"og:description\" content=\"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes Em uma an\u00e1lise recente de telemetria, identificamos um evento de tr\u00e1fego de sa\u00edda malicioso (upload attack) originado na faixa 100.64.x.x, correspondente \u00e0 rede de clientes do provedor. Diferente de um ataque volum\u00e9trico tradicional de entrada, neste caso o comportamento observado mostra a rede interna [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/\" \/>\n<meta property=\"og:site_name\" content=\"Flowspec Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-22T14:35:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-02T14:39:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1672\" \/>\n\t<meta property=\"og:image:height\" content=\"941\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"flowspec\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"flowspec\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/\"},\"author\":{\"name\":\"flowspec\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/#\\\/schema\\\/person\\\/5117ef0b5eab88e039773cd18a8f2c15\"},\"headline\":\"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes\",\"datePublished\":\"2026-06-22T14:35:20+00:00\",\"dateModified\":\"2026-07-02T14:39:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/\"},\"wordCount\":636,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png\",\"keywords\":[\"banner principal\",\"destaque\"],\"articleSection\":[\"Prote\u00e7\u00e3o contra ataques DDoS\",\"Uncategorized\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/\",\"url\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/\",\"name\":\"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes - Flowspec Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png\",\"datePublished\":\"2026-06-22T14:35:20+00:00\",\"dateModified\":\"2026-07-02T14:39:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/#\\\/schema\\\/person\\\/5117ef0b5eab88e039773cd18a8f2c15\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#primaryimage\",\"url\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png\",\"contentUrl\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png\",\"width\":1672,\"height\":941},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/upload-identificado-na-rede-de-clientes\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/\",\"name\":\"Flowspec Blog\",\"description\":\"Flowspec Solutions \u00e9 uma empresa de Telecomunica\u00e7\u00f5es focada em mitiga\u00e7\u00e3o de ataques DDoS\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/#\\\/schema\\\/person\\\/5117ef0b5eab88e039773cd18a8f2c15\",\"name\":\"flowspec\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c3a082caca1a9a15a83dbfe4975070ea89416d363c4dab9664a8eb940f5c53a7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c3a082caca1a9a15a83dbfe4975070ea89416d363c4dab9664a8eb940f5c53a7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c3a082caca1a9a15a83dbfe4975070ea89416d363c4dab9664a8eb940f5c53a7?s=96&d=mm&r=g\",\"caption\":\"flowspec\"},\"sameAs\":[\"https:\\\/\\\/flowspec.net.br\\\/blog\"],\"url\":\"https:\\\/\\\/flowspec.net.br\\\/blog\\\/author\\\/flowspec\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes - Flowspec Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/","og_locale":"pt_BR","og_type":"article","og_title":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes - Flowspec Blog","og_description":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes Em uma an\u00e1lise recente de telemetria, identificamos um evento de tr\u00e1fego de sa\u00edda malicioso (upload attack) originado na faixa 100.64.x.x, correspondente \u00e0 rede de clientes do provedor. Diferente de um ataque volum\u00e9trico tradicional de entrada, neste caso o comportamento observado mostra a rede interna [&hellip;]","og_url":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/","og_site_name":"Flowspec Blog","article_published_time":"2026-06-22T14:35:20+00:00","article_modified_time":"2026-07-02T14:39:15+00:00","og_image":[{"width":1672,"height":941,"url":"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png","type":"image\/png"}],"author":"flowspec","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"flowspec","Est. tempo de leitura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#article","isPartOf":{"@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/"},"author":{"name":"flowspec","@id":"https:\/\/flowspec.net.br\/blog\/#\/schema\/person\/5117ef0b5eab88e039773cd18a8f2c15"},"headline":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes","datePublished":"2026-06-22T14:35:20+00:00","dateModified":"2026-07-02T14:39:15+00:00","mainEntityOfPage":{"@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/"},"wordCount":636,"commentCount":0,"image":{"@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#primaryimage"},"thumbnailUrl":"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png","keywords":["banner principal","destaque"],"articleSection":["Prote\u00e7\u00e3o contra ataques DDoS","Uncategorized"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/","url":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/","name":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes - Flowspec Blog","isPartOf":{"@id":"https:\/\/flowspec.net.br\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#primaryimage"},"image":{"@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#primaryimage"},"thumbnailUrl":"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png","datePublished":"2026-06-22T14:35:20+00:00","dateModified":"2026-07-02T14:39:15+00:00","author":{"@id":"https:\/\/flowspec.net.br\/blog\/#\/schema\/person\/5117ef0b5eab88e039773cd18a8f2c15"},"breadcrumb":{"@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#primaryimage","url":"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png","contentUrl":"https:\/\/flowspec.net.br\/blog\/wp-content\/uploads\/2026\/06\/ChatGPT-Image-22-de-jun.-de-2026-11_28_03.png","width":1672,"height":941},{"@type":"BreadcrumbList","@id":"https:\/\/flowspec.net.br\/blog\/upload-identificado-na-rede-de-clientes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/flowspec.net.br\/blog\/"},{"@type":"ListItem","position":2,"name":"An\u00e1lise t\u00e9cnica de ataque de upload identificado na rede de clientes"}]},{"@type":"WebSite","@id":"https:\/\/flowspec.net.br\/blog\/#website","url":"https:\/\/flowspec.net.br\/blog\/","name":"Flowspec Blog","description":"Flowspec Solutions \u00e9 uma empresa de Telecomunica\u00e7\u00f5es focada em mitiga\u00e7\u00e3o de ataques DDoS","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/flowspec.net.br\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Person","@id":"https:\/\/flowspec.net.br\/blog\/#\/schema\/person\/5117ef0b5eab88e039773cd18a8f2c15","name":"flowspec","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/c3a082caca1a9a15a83dbfe4975070ea89416d363c4dab9664a8eb940f5c53a7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c3a082caca1a9a15a83dbfe4975070ea89416d363c4dab9664a8eb940f5c53a7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c3a082caca1a9a15a83dbfe4975070ea89416d363c4dab9664a8eb940f5c53a7?s=96&d=mm&r=g","caption":"flowspec"},"sameAs":["https:\/\/flowspec.net.br\/blog"],"url":"https:\/\/flowspec.net.br\/blog\/author\/flowspec\/"}]}},"views":80,"_links":{"self":[{"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/posts\/262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/comments?post=262"}],"version-history":[{"count":1,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/posts\/262\/revisions"}],"predecessor-version":[{"id":266,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/posts\/262\/revisions\/266"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/media\/263"}],"wp:attachment":[{"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/media?parent=262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/categories?post=262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/flowspec.net.br\/blog\/wp-json\/wp\/v2\/tags?post=262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}