We started blocking /in.cgi? 3 days ago and about 2-3 time a day, we block somthing like this, always in the .cw.cm zone. CM is Cameroum I think and it does not make a lot of sence.
Anybody know about .cw.cm url or is it poisonous url?
The .cm Top Level Domain is notorious because malicious domains will commonly get registered for people that mis-type .com.
goodsite.com = good site
goodsite.cm = bad site