For the past week or so an unknown person has been sending us some interesting photos.

This person claims to be frustrated with bulletproof hosting provider 'zservers dot ru'. Their frustration resulted in them doing a 'pentest' and successfully compromising the bulletproof host provider.

It should be noted this is not the first time we've shared information on zserver being compromised. A few months ago we disclosed an unknown person had been claiming to compromise the bulletproof hosting provider. In summary: they STILL have access. It's been months.

Throughout our conversation they have sent us dozens of screenshots from this bulletproof host. They've unveiled the owners real name (with passport information and photographs). They've also shown e-mail correspondence between the owner and customers who have questions about the service and pricing.

They also successfully enumerated every customer of the bulletproof hosting provider — the names of the customers (probably fake), the email address used to register with the service, the billing information, and the services they're paying for.

This unknown person(s) managed to pivot further and get access to administrative resources, discovering this bulletproof hosting provider has a directory named 'passwords (all)' which is filled with hundreds, possibly thousands, of credentials to various things.

If it makes you feel any better, they do indeed read abuse complaints they receive. But, they don't take action on it. At least it's read, right?