PegasHosting gets its wings clipped
Plug partly pulled on 'scam-friendly' ISP
Customer Success Testimonial: Recovery is Everything
Cybercrime-friendly Ukrainian ISP PegasHosting has been partially taken offline.
The main range of IP addresses used by the ISP - which has been associated with hosting phishing mule scam sites and all manner of badness - has been null-routed, following action by one of its upstream providers.
"Hosted web sites include fake pharmacies, fake job sites, hacking, porn and what appear to be fake dating sites," security blog dynamoo.com reports.
"Blocking the entire 178.162.135.0/24 (178.162.135.0 - 178.162.135.255) will probably do you no harm."
PegasHosting continues to operate through other IP ranges associated with two different upstream providers. Security campaigners are lobbying these providers, one of which feeds into Global Crossing, to pull the plug on PegasHosting.
A list of the dodgy domains associated with PegasHosting can be found in a blog post by hpHosts here. ®
COMMENTS
untitled
"what appear to be fake dating sites"
Are there any other kind?

IT infrastructure monitoring strategies
What you need to know about cloud backup
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Customer Success Testimonial: Recovery is Everything