Кибербункер: История скандального хостинг-провайдера

Former Internet service provider

CyberBunker was an Internet service provider located in the Netherlands and Germany that, according to its website, "hosted services to any website except child pornography and anything related to terrorism". The company first operated in a former NATO bunker in Zeeland, and later in another former NATO bunker in Traben Trarbach, Germany. CyberBunker served as a web host for The Pirate Bay and as one of the many WikiLeaks mirrors. CyberBunker has also been accused of being a host for spammers, botnet command and control servers, malware, and online scams. The company has also been involved in Border Gateway Protocol hijacks of IP addresses used by Spamhaus and the United States Department of Defense. The Spamhaus hijack was part of an exceptionally large distributed denial of service attack launched against them in March 2013. Because of the size of this attack it received considerable mainstream media attention. The company is named for its initial location in a former Cold War bunker. As of 2013, CyberBunker listed its address as the bunker, but the location of CyberBunker's servers was unclear. Sven Olaf Kamphuis referred to CyberBunker as the Republic of CyberBunker and referred to himself as the Minister of Telecommunications and Foreign Affairs. In September 2019, the German police stormed and shut down the company's operations in its bunker in Traben Trarbach. Seven suspects were arrested.

In 1995, Herman Johan Xennt bought a bunker just outside the small town of Kloetinge in the south of the Netherlands, which had been formerly used by NATO, and was built in 1955. The bunker, originally used as a wartime Provincial Military Command Center (Provinciaal Militair Commando) of the Dutch military, was built to withstand a nuclear attack. The bunker was de assessed by the Dutch military in 1994. With collaborators, Xennt formed the CyberBunker company within the bunker, to offer "bulletproof hosting" of web sites. In 2002, a fire broke out in the Dutch bunker. After the fire was put out, it was discovered that besides Internet hosting services, an MDMA laboratory was in operation. Following the fire the local town denied the company a business license, resulting in the CyberBunker servers being moved to above ground locations, including Amsterdam. In its publicity, the company continued to claim that it operated from the bunker. Businessweek reported them as stating that the bunker was "full of junk" when they acquired it, and quoted Guido Blaauw, their general manager, as stating that the CyberBunker publicity material was "all Photoshop".

In October 2009 BitTorrent tracker The Pirate Bay, which had been subjected to legal action by various anti piracy groups including Dutch copyright organisation BREIN, moved away from Sweden to CyberBunker. In 2010 the Hamburg district court ruled that CyberBunker, operating in Germany as CB3Rob Ltd & Co KG, was no longer allowed to host The Pirate Bay, being subject to a €250,000 fine or up to two years' imprisonment for each infringement. In March 2013, Spamhaus added CyberBunker to its blacklist. Shortly afterwards a distributed denial of service (DDoS) attack of previously unreported scale (peaking at 300 Gbit/s; an average large scale attack is often around 50 Gbit/s, while the largest known previously publicly reported attack was 100 Gbit/s) was launched against Spamhaus email and web servers using a Domain Name System (DNS) amplification attack; as of 2013 the attack had lasted for over a week. Steve Linford, chief executive for Spamhaus, said that they had withstood the attack. Other companies, such as Google, had made their resources available to help absorb the traffic. On 25 April 2013, Sven Olaf Kamphuis, a vocal spokesman for CyberBunker, was arrested at the request of Dutch authorities near Barcelona by Spanish Police after collaboration through Eurojust. An anonymous press release uploaded on Pastebin. com the following day demanding the release of Kamphuis threatened more large scale attacks should he remain in custody. The Spanish authorities reported that Kamphuis operated from a well equipped bunker and used a van as a mobile computing office. No further information on this bunker was provided. In September 2013, it was revealed that a second arrest had been made in April in relation to the Spamhaus attack, the suspect being a 16 year old from London. Kamphuis was held for 55 days awaiting extradition to the Netherlands and was later found guilty and sentenced to 240 days in prison. His sentence was suspended, with credit for the 55 days served.

In 2013, the company purchased its second bunker in Traben Trarbach, Germany. The Irish criminal George Mitchell, who lived for a while in Traben Trarbach, approached Xennt about running an encrypted phone business. In September 2019, 600 German police officers raided the bunker. Police later said that the bunker was the location from which a late 2016 denial of service attack on Deutsche Telekom had been launched. In December 2023, their site became active again under cyberbunker. pro and cyberbunker. world.

The Netflix documentary Cyberbunker: The Criminal Underworld was released in 2023. It contains interviews with the investigating prosecutor and police officers, journalists, the mayor of Traben Trarbach, Xennt and other members of his organization. Police revealed that they had planted an undercover gardener and a cleaning lady in the bunker and that they lured Xennt and his crew out of the bunker before the raid.