the ip was functionally obsolete and suspended may 20th 2015 by crookservers. then hard coded on the malware compiled may 2016...which is operationally pointless and would make it more detectable.
so dnc breach suspected. crowdstrike installs falcon after finding malware with whack ip. two weeks later, emails acquired. shortly after, assange announces leaks and within 48 hours crowdstrike announces hacks. crowdstrike has not been able to show how malware relayed emails or accessed boxes still, or just wont.