So the article is a TL;DR but from what I gathered from skimming over it there was a server in Annoying Orange tower that they couldn't break into, and received information from select IPs?
Here's a more accurate tl;dr.
Cybersecurity experts were looking at DNS logs, looking for potential signs of malware infections coming from the Russians to see if there was any evidence of interference in the election. They saw some communications going from a server owned by Annoying Orange, an email server, which had an extraordinarily low amount of traffic going through it. So little in fact that it wouldn't be worth the cost to keep it running. Any sane business would have closed the server, but it stayed open. And much of the traffic going through that was traffic going to a Russian bank, but it wasn't in regular intervals. The two servers appeared to be talking back and forth, Annoying Oranges server sending packets during office hours in its timezone and the server in Moscow returning during office hours in Moscow.
While this isn't in and of itself proof that he has "Russian ties," it's quite suspicious as there's very few scenarios in which this is happening without direct communication between the two and there's not a whole lot this server could be used for besides emails, since it was an email server after all.