Wikileaks is Connected to Russia – Despite Their Claims

By Laurelai Bailey

 

Wikileaks has time and time again denied any connections to Russia or the Russian state, but – like Donald Trump – they are lying. This weekend, it was exposed on Twitter that they acquired major Russian servers – from a known hacker – one week before the Podesta emails were released.

 

I will walk you through the proof, since its a little complex for non computer experts. So let’s start with a primer.

 

All websites on the internet have an address, much like houses in the real world. This address are usually names and things you recognize, like google.com or amazon.com. But behind that address there are a series of numbers, unique to each server known as internet protocol addresses. If you have ever had to log in to your wireless router, you wound up typing a number into your browser like 192.168.1.1, this is an IP address.

 

Now IP addresses have physical locations, in the real world, and tools exist to discover where those addresses are.

 

Wikileaks  -like every other website –  has servers and IP addresses behind the domain name “wikileaks.org”. When we do a command on a linux machine called “dig” we find out all of the IP addresses behind the domain name. Here is the output of the dig command. Don’t worry if you can’t understand this part – just scroll down to the rest of the article. The writing in the middle explains it, but for those that want proof, we need to list how we get from a to b. 

 

dig wikileaks.org

 

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6_8.4 <<>> wikileaks.org

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4839

;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 8

 

;; QUESTION SECTION:

;wikileaks.org.                 IN      A

 

;; ANSWER SECTION:

wikileaks.org.          600     IN      A       95.211.113.154

wikileaks.org.          600     IN      A       141.105.65.113

wikileaks.org.          600     IN      A       141.105.69.239

wikileaks.org.          600     IN      A       195.35.109.44

wikileaks.org.          600     IN      A       195.35.109.53

wikileaks.org.          600     IN      A       95.211.113.131

 

;; AUTHORITY SECTION:

wikileaks.org.          1470    IN      NS      ns2.wikileaks.org.

wikileaks.org.          1470    IN      NS      ns1.wikileaks.org.

wikileaks.org.          1470    IN      NS      ns4.wikileaks.org.

wikileaks.org.          1470    IN      NS      ns3.wikileaks.org.

 

;; ADDITIONAL SECTION:

ns1.wikileaks.org.      80774   IN      A       46.28.206.81

ns2.wikileaks.org.      83083   IN      A       46.28.206.82

ns3.wikileaks.org.      80774   IN      A       95.211.113.131

ns3.wikileaks.org.      80774   IN      A       195.35.109.54

ns3.wikileaks.org.      80774   IN      A       31.192.105.18

ns4.wikileaks.org.      80774   IN      A       195.35.109.44

ns4.wikileaks.org.      80774   IN      A       95.211.113.154

ns4.wikileaks.org.      80774   IN      A       141.105.65.114

 

;; Query time: 20 msec

;; SERVER: 213.186.33.99#53(213.186.33.99)

;; WHEN: Fri Mar 10 16:21:37 2017

;; MSG SIZE  rcvd: 327

 

Now the above might mostly seem like junk to you, if you don’t speak computer, so we’ll cut out everything not that’s not relevant and focus on what is relevant, namely, these two addresses:

 

wikileaks.org.          600     IN      A       141.105.65.113

wikileaks.org.          600     IN      A       141.105.69.239

 

When you look up these addresses, listed above, via a command known as “whois”, you can find their physical location in the real world.

 

organisation:   ORG-MTL21-RIPE

org-name:       Mir Telematiki Ltd

org-type:       LIR

address:        Barabannii pereulok 4/4

address:        107023

address:        Moscow

address:        RUSSIAN FEDERATION

phone:          +7 495 369 9796

fax-no:         +7 495 369 9796

mnt-ref:        MTLM-MNT

mnt-ref:        RIPE-NCC-HM-MNT

mnt-by:         RIPE-NCC-HM-MNT

mnt-by:         MTLM-MNT

abuse-mailbox:  abuse@hostkey.ru

abuse-c:        HA2800-RIPE

created:        2010-10-06T10:46:46Z

last-modified:  2016-09-30T12:14:19Z

source:         RIPE # Filtered

 

This information is the same for both IP addresses, and if you notice the last modified date as “2016-09-30” that is when the IP address’s pointing to a server was changed. So we can safely bet that this is when wikileaks added these addresses to their systems.

In turn, this proves Wikileaks gained Russian hosting on September 30th 2016, one week before the Podesta emails were made public. Wikileaks got Russian Federation virtual addresses one week before the Podesta emails. Let that sink in.

 

Now the actual owner of the IP addresses is a man by the name of Peter Chayanov, whose IP addresses have hosted spammers and hackers, according to my sources, who work in internet backbone companies.

 

Chayanov’s IP space is a virtual equivalent of a bad neighborhood that makes you lock your car doors when you drive through it. So this further implies a connection to Wikileaks and Russian hackers. That sort of stuff is Chayanov’s day job. And, further, it’s important to remember, this web host also stays around at the consent of the Russian government despite (or because of?) being known cyber criminal hosts.

chayanov.jpg

The other addresses I told you to ignore before? When you do a whois on wikileaks itself you get shown IP’s in Amsterdam and Zurich, ones that make much more sense to have since they are in countries with strong freedom of speech and transparency laws. Places you would want an organization like that in, but the Russian IP spaces, to be visible to you have to be dug for carefully to find them. They did a fairly good job obfuscating it, but the records will always be able to be found.

Mr. Chayanov did not disguise his hosting carefully enough. And when he was exposed this weekend on Twitter, he made matters worse by deleting his account at once.

So why would Wikileaks, a “transparency” org acquire hosting in a country thats known to assassinate whistleblowers? Especially ones that challenge Trumps presidency? It makes no sense for people who claim to be for transparency to take up virtual residence in an autocratic nation that might try to kill them. So why would they do it? Well, it’s pretty simple; they would only be there with the consent of the Russian government, ieVladimir Putin. He wants them to be there and allows them to be there.

 

Why would he do that? Sounds an awful lot like putting a rattlesnake in your own bed to keep the neighbors away. That is if wikileaks was as neutral and would leak against anyone like they claim. Putin might be an autocrat, but he isn’t an idiot.

 

He would not allow them there unless he got something out of it for himself, like immunity to being leaked against or by having influence over what gets leaked and when. Putin like all politicians is a self interested lout and acts in ways that keep him in power. Much like many other world leaders. So wikileaks dropping info on the US alone isn’t enough to allow them to stay, he knows he would be next on the leaking list.

 

So that strongly suggests Russia is getting some kind of favorable or special treatment. Its also likely that the CIA was already aware of this and that this is part of the information they base their claims of Russian interference on. When you see this alone its enough to strongly suggests collusion with the Russian government either directly or indirectly.

 

So it seems fairly sure to me that Wikileaks is now in bed with the Russian government in some form or fashion. Will we shortly discover that Mr. Chayanov is also connected to Guccifer2? 

Laurelai Bailey was an original Wikileaks activist.

13 Replies to “Wikileaks is Connected to Russia – Despite Their Claims”

  1. You have fundamentally confused whois changes with domain changes.

    If you are hanging a great deal on the date when the change occurred as recorded in whois, then the claim collapses because the evidence doesn’t timestamp what you suggest, which is when A (and possibly NS) records for Russian servers were added to wikileaks hosting arrangements. The closest thing to a timestamp for the last set of domain changes (but fundamentally unreliable, as it’s not a true timestamp, nor is it a notarised event to be a reliable timestamp) is the wikileaks SOA record:

    bayard@blackstallion:~ 22:01:11 [547]$ dig SOA +noadditional http://www.wikileaks.org

    ; <> DiG 9.9.5-9+deb8u8-Debian <> SOA +noadditional http://www.wikileaks.org
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40484
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 9

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ;; QUESTION SECTION:
    ;www.wikileaks.org. IN SOA

    ;; ANSWER SECTION:
    http://www.wikileaks.org. 300 IN CNAME wikileaks.org.
    wikileaks.org. 2652 IN SOA wikileaks.org. root.wikileaks.org. 2013101005 7200 3600 86400 3600

    ;; AUTHORITY SECTION:
    wikileaks.org. 82158 IN NS ns1.wikileaks.org.
    wikileaks.org. 82158 IN NS ns4.wikileaks.org.
    wikileaks.org. 82158 IN NS ns2.wikileaks.org.
    wikileaks.org. 82158 IN NS ns3.wikileaks.org.

    ;; Query time: 294 msec
    ;; SERVER: 192.168.0.3#53(192.168.0.3)
    ;; WHEN: Sun Mar 12 22:16:59 GMT 2017
    ;; MSG SIZE rcvd: 301

    Like

  2. Hi Louise,
    A Google maps search of the lat/long coordinates of one of those IPs lands inside the walls of the Kremlin (I think u retweeted an image of this at one point). I was surprised u didn’t mention that—is it not as significant as it seems?

    Liked by 3 people

  3. It looks like you are right on the money to me! Russia has NEVER been a friend to the USA and I wish more people would pick up a history book once in a while and they can deduce the Russian way of thinking real quickly. They are a very strong unsympathetic hard nosed society to put it quite mildly. Americans bored since 1960 probably don’t remember our fling with Cuba and the Soviet influence behind it all. The world of communism is a world our people here in a free democracy ( so far) don’t understand or believe exsisits. Read and educate yourselves my fellow Americans, please don’t live in the bubble of happy and nieve and simplistic fog! Things around the world effect us more than ever and the world isn’t just your happy little house in Pleasantvilla USA. I wish it was true but alas, bad dudes do exsisit and do not like us! Wake up and fight for this country that we all love and want lead by a real president ! President Obama was a prince among men and we were so lucky to have his superb guide nice for 8 years. Now we are going on a wing and a prayer.

    Like

  4. Crap journalism from a thoroughly discredited source. Fake News exhibit A. Shame on @louisemensch

    Liked by 1 person

  5. thanks for telling this part of the story. we have much information on trump but were drowned out by bots and the “Fake news crowd we knew about the Moscow server for quite some time and when louse tweeted about it giving OPFurg credit it was cool. This is a good thing as more will follow that account. Op deatheaters has more info as do other anon accounts. thanks and I will continue to fight for justice and the oppressed as always. Thanks for what you do, it is very important that you continue to publish I hope it works faster than when I took down a governor, but then I was by myself then Now I have a to add a we to that as now folks have joined us just as you have in the stand against corruption and fuckery at the highest levels. This is dangerous stuff to do alone. Stay safe,

    ________________________________

    Like

  6. Petr Chayanov’s LinkedIn shows his closest professional associates.

    It lists HostKey’s BizDev manager as Lev Chneider, of Chneider Ventures.

    On his Angel.co page, Chneider writes: “Last year I was able to secure $1 million worth of financing for a client, this was a tough challenge and took me close to 6 month to execute”

    He doesn’t list any of his clients though. He’s very secretive.

    However, public records show Lev Chneider’s investment company “Chneider Ventures, Ltd” (registered in UK) was dissolved on the SAME DATE that the DNC hack was announced.

    That seems like quite a coincidence.

    Like

  7. Well, the previous suspicions have been verified. I’m sure more suspicions will be also. The Trump camp was only suspected of being in collusion with the Russians. Flynn and Stone are obviously in deep with the Russians. Stone admitted being connected to the DNC hackers. It keeps getting more rancid in the Trump dump now that WikiLeaks is in fact proven to be with the Russians it is plain the Trump election was helped by Putin and Trump knew it all along. An independent investigation is a necessity, not just a wish.

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s