Is my webserver being abused for banking fraud?
- by koffie
Since a few weeks i'm getting a lot of 403 errors from apache in my log files that seem to be related to a bank frauding scheme.
The relevant log entries look like this (The ip 1.2.3.4 is one I made up, I did not modify the rest of each line)
www.bradesco.com.br:80 / 1.2.3.4 - - [01/Dec/2012:07:20:32 +0100] "GET / HTTP/1.1" 403 427 "-"…