Can someone explain how they managed to identify his server running a Tor service? From there on it seems straight forward, they got access to the server through a request with the LE in the host country.