We've had similar experience with this VPN provider.

He claims not being able to track malicious actor is for the benefit of free speech but when malware is used to attack people who express free speech he did not understand that his service is not contributing towards free speech but hinders it.

Tonu
CERT-EE

On 25.06.2020 04:15, PP wrote:

Botnet controllers on VPN provider that refuses to act:


    organisation:    ORG-SL751-RIPE
    org-name:        Freedom Of Speech VPN
    org-type:        OTHER
    address:         P.O. Box 9173
    address:         Victoria
    address:         Mahe Island
    address:         Seychelles
    e-mail:          info@FOS-VPN.org
    abuse-c:         SL12644-RIPE
    mnt-ref:         FOS-VPN-MNT
    mnt-by:          FOS-VPN-MNT
    created:         2018-07-13T05:33:45Z
    last-modified:   2020-02-28T12:37:39Z
    source:          RIPE




-------- Forwarded Message --------
Subject: Re: botnet controllers
Date: Wed, 24 Jun 2020 21:49:21 +0200
From: info@ghlc.biz
To: PP <phishphucker@storey.ovh>


On 2020-06-24 13:03, PP wrote:
Hello!


Please note that all mentioned IPs belong to non-logging VPN services.

No user logs are kept.


Sincerely yours

David Craig


SBL488704
185.140.53.75/32
ghlc.biz
23-Jun-2020 05:26 GMT
Malware botnet controller @185.140.53.75
https://www.spamhaus.org/sbl/query/SBL488704


SBL488686
91.193.75.58/32
ghlc.biz
22-Jun-2020 18:39 GMT
NanoCore botnet controller @91.193.75.58
https://www.spamhaus.org/sbl/query/SBL488686


SBL488548
185.244.30.201/32
ghlc.biz
19-Jun-2020 13:21 GMT
QuasarRAT botnet controller @185.244.30.201
https://www.spamhaus.org/sbl/query/SBL488548


SBL488006
185.140.53.162/32
ghlc.biz
18-Jun-2020 10:11 GMT
NanoCore botnet controller @185.140.53.162
https://www.spamhaus.org/sbl/query/SBL488006


SBL487900
185.140.53.229/32
ghlc.biz
16-Jun-2020 13:28 GMT
NanoCore botnet controller @185.140.53.229
https://www.spamhaus.org/sbl/query/SBL487900


SBL487899
185.244.30.113/32
ghlc.biz
16-Jun-2020 12:59 GMT
RemcosRAT botnet controller @185.244.30.113
https://www.spamhaus.org/sbl/query/SBL487899


SBL487893
185.140.53.236/32
ghlc.biz
16-Jun-2020 12:07 GMT
NanoCore botnet controller @185.140.53.236
https://www.spamhaus.org/sbl/query/SBL487893


SBL487886
185.165.153.45/32
ghlc.biz
16-Jun-2020 10:26 GMT
NanoCore botnet controller @185.165.153.45

https://www.spamhaus.org/sbl/query/SBL487886