Hack Everything…

Part 4 Ongoing Allegations... September to December 2016
September 15, 2016 Server Company Provides Analysis of Hacker Locations
While nearly all of the servers claimed to be involved in the Russian Hacking attacks
were not in Russia and have failed to provide any analysis from their server logs (I really
wonder why this is because all servers have server logs), one Russian company that was
caught up in the cyber attack did take the time to analyze their logs and issue a press
release with their findings. Since this is what every server company should have done, I
will quote from an English translation of their press release which was written in Russian.
This company has since been attacked as being owned by Russian criminals and I want
to make it clear that I have no way of verifying their report. I am simply quoting them to
show the public what could be done if a server company wanted to help us discover the
truth – namely they should all publish their logs. Also I am certain that the FBI can get a
warrant for all logs of all servers in the US. The fact that the FBI has not done this (or has
not released information about the logs if they have done this) is a strong indication that
the FBI is not really interested in providing the public with additional information about the
locations of communications from the hackers to the servers. Here is the source
document which will be translated for you if you visit the page with a Chrome Browser.
https://chronopay.com/blog/2016/09/15/chronopay-pomogaet-king-servers-com/
Here is an edited version of their press release (I edited to make it shorter by eliminating
text that was not related to the server logs. I also bolded the important parts):
“King Servers (https://www.king-servers.com), which owns servers from which the hacker
allegedly performed attacks on the United States Democratic Party, states the absence of
any «Russian trace» in this cybercrime nor its own involvement...King Servers, owned
indeed by Russian nationals, provides VPS and VDS rental services of the equipment,
physically located in the Netherlands. Earlier, after the FBI alert
(https://s.yimg.com/dh/ap/politics/images/boe_flash_aug_2016_final.pdf) and analysis
from Threat Connect (https://threatconnect.com/blog/state-board -election -rabbit-hole /),
the world's leading media were spreading information about the discovery of the socalled
«Russian trace» in the attacks on the United States democratic party in
Illinois. The «Russian trace» was mostly presented as the use of King Servers services,
stating that the company belongs to Russian citizens. As of September 15, neither King
Servers received any complaints or appeals for any server misuse or abuse, nor any
public authority did any attempts for servers withdrawal. Due to that King Servers found
out about the issue related to that attack only on September 15, at 7 am Moscow time,
and immediately shut down identified servers.
The analysis of the internal data allows King Services to confidently refute any
conclusions about the involvement of the Russian special services in this
attack. Attackers rented two servers using probably fabricated personal and identification
data. After the attack servers were wiped out. However, King Servers maintains logs of
accessing administrative control panel. After log analysis, King Servers obtained a
list of about 60 of all possible IP addresses of «hackers», none of which belongs to
any Russian ip range. Attackers were logging into administrative control panel
mainly from Scandinavian countries (Norway, Sweden) and from the European
Union (Italy).
Hack Everything… A Detailed Timeline of the DNC Hack Page 49