PegasHosting gets its wings clipped

Cybercrime-friendly Ukrainian ISP PegasHosting has been partially taken offline.

The main range of IP addresses used by the ISP - which has been associated with hosting phishing mule scam sites and all manner of badness - has been null-routed, following action by one of its upstream providers.

"Hosted web sites include fake pharmacies, fake job sites, hacking, porn and what appear to be fake dating sites," security blog dynamoo.com reports.

"Blocking the entire 178.162.135.0/24 (178.162.135.0 - 178.162.135.255) will probably do you no harm."

PegasHosting continues to operate through other IP ranges associated with two different upstream providers. Security campaigners are lobbying these providers, one of which feeds into Global Crossing, to pull the plug on PegasHosting.

A list of the dodgy domains associated with PegasHosting can be found in a blog post by hpHosts here. ®