| Threat | Host 1 | Host 2 | Host 3 | Host 4 | Host 5 | Host 6 |
| Pushdo, Jan 31 | 216.195.63.22 3fn.net | 91.211.64.117 Ural Industrial Ltd | 70.38.68.137 iWeb | |||
| Pushdo, Jan 31 | 216.195.55.50 3fn.net | 94.247.3.44 Zlkon.lv | 209.66.122.238 APS Communication | |||
| Cutwail, Jan. 31 | 216.195.56.22 3fn.net | |||||
| Cutwail, Jan. 31 | 216.195.56.22 3fn.net | 208.66.195.15 Optimal Solutions/McColo | 91.203.92.7 UATelecom | |||
| Cutwail, Jan. 31 | 216.195.63.22 3fn.net | 66.45.246.146 Interserver | 70.38.68.137 iWeb | 194.8.75.216 Dragonara-NET | ||
| Pushdo, Jan. 31 | 216.195.63.22 3fn.net | 91.211.64.117 Ural Industrial Ltd | 194.8.75.216 Dragonara-NET | |||
| Trojan Dropper Agent Jan 31 | 216.195.58.111 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 222.186.12.227 Chinanet | ||
| Trojan Dropper Agent Jan 31 | 216.195.63.22 3fn.net | 91.211.64.117 Ural Industrial Ltd | 70.38.68.137 iWeb | 94.247.3.46 Zlkon.lv | ||
| Pushdo, Jan 31 | 216.195.63.22 3fn.net | 94.247.3.46 Zlkon.lv | 70.38.68.137 iWeb | 91.211.64.117 Ural | ||
| Pushdo, Jan 30 | 216.195.55.50 3fn.net | 208.66.194.240 McColo NOC | 91.203.92.7 UATelecom | |||
| Cutwail, Jan. 30 | 216.195.55.50 3fn.net | 208.66.195.15 Optimal Solutions/McColo | 208.66.195.71 McColo | |||
| Cutwail, Jan. 29 | 216.195.56.22 3fn.net | 94.247.3.46 Zlkon.lv | ||||
| Virut, Jan. 28 | 216.195.58.111 3fn.net | 58.253.66.46 | 70.38.64.149 iWeb | 59.53.48.233 | 222.186.12.227 Chinanet | |
| Cutwail, Jan. 25 | 216.195.56.22 3fn.net | 208.66.194.240 McColo NOC | 91.203.92.7 UATelecom | |||
| Cutwail, Jan. 25 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 91.203.92.7 UATelecom | |||
| Pushdo, Jan. 22 | 216.195.63.22 3fn.net | 66.45.246.146 Interserver | 194.8.75.216 Dragonara-NET | |||
| Virut, Jan. 21 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Cutwail, Jan. 21 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Pushdo, Jan 21 | 216.195.63.22 3fn.net | 94.247.3.46 Zlkon.lv | 66.45.246.146 Interserver | 70.38.68.137 iWeb | ||
| Cutwail, Jan. 21 | 216.195.63.22 3fn.net | 194.8.75.216 Dragonara Net | 70.38.68.137 iWeb | |||
| Virut, Jan. 19 | 216.195.56.251 3fn.net | 216.195.58.111 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Trojan Downloader Agent BWH | 216.195.63.22 3fn.net | 91.211.64.117 Ural Industrial Ltd | 94.247.3.46 Zlkon.lv | 70.38.68.137 iWeb | ||
| Pushdo, Jan. 18 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Cutwail, Jan. 16 | 216.195.63.22 3fn.net | 91.211.64.117 Ural Industrial Ltd | 66.45.246.14 Interserver | 70.38.68.137 iWeb | ||
| Pushdo, Jan. 15 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 70.38.68.137 iWeb | |||
| Pushdo, Jan. 14 | 216.195.63.22 3fn.net | |||||
| Virut, Jan. 13 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Pushdo, Jan. 11 | 216.195.63.22 3fn.net | |||||
| Virut, Jan. 11 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Cutwail, Jan. 10 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Virut, Jan. 9 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | proxim.ircgalaxy.pl Hostfresh |
| Cutwail, Jan. 10 | 216.195.56.22 3fn.net | 91.203.92.189 UATelecom | 70.38.68.137 iWeb | |||
| Cutwail, Jan. 9 | 216.195.63.22 3fn.net | 91.211.64.117 Ural Industrial Ltd | 194.8.75.216 Dragonara-NET | |||
| Cutwail, Jan. 8 | 216.195.55.50 3fn.net | 208.66.194.240 McColo NOC | ||||
| Cutwail, Jan. 8 | 216.195.55.50 3fn.net | 208.66.195.71 McColo | 91.203.92.7 UATelecom | |||
| Cutwail, Jan. 8 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | ||||
| Virut, Jan. 7 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Cutwail, Jan. 5 | 216.195.63.22 3fn.net | |||||
| Cutwail, Jan. 4 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Virut, Jan. 2 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | proxim.ircgalaxy.pl Hostfresh |
| Pushdo, Jan. 1 | 216.195.56.22 3fn.net | 208.66.195.71 McColo | ||||
| Virut, Jan. 1 | 216.195.56.22 3fn.net | 208.66.195.15 Optimal Solutions/McColo | 209.66.122.238 APS Communication | |||
| Virut, Dec. 31 | 216.195.58.111 3fn.net | 216.195.56.251 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Cutwail, Dec. 28 | 216.195.55.50 3fn.net | 208.66.195.15 Optimal Solutions/McColo | 209.66.122.238 APS Communication | |||
| Cutwail, Dec. 28 | 216.195.63.22 3fn.net | |||||
| Trojan Downloader Agent BWH, Dec. 27 | 216.195.63.22 3fn.net | 94.247.3.46 Zlkon.lv | 91.211.64.117 Ural Industrial Ltd. | |||
| Cutwail, Dec. 27 | 216.195.55.50 3fn.net | 208.66.194.232 McColo NOC | 208.66.194.240 McColo NOC | |||
| Virut, Dec. 25 | 216.195.56.251 3fn.net | 216.195.58.111 3fn.net | 70.38.64.149 iWeb | 218.61.7.9 CNC Group | 58.253.66.46 CNC Group | |
| Cutwail, Dec. 24 | 216.195.63.22 3fn.net | |||||
| Trojan Downloader Agent BWH, Dec. 23 | 216.195.56.22 3fn.net | 194.8.75.216 Dragonara Net | 70.38.68.137 iWeb | |||
| Pushdo Dec. 22 | 216.195.56.22 3fn.net | 208.66.194.240 McColo NOC | 91.203.92.7 UATelecom | |||
| Cutwail, Dec. 21 | 216.195.56.22 3fn.net | 200.63.45.46 LACNIC? | ||||
| Trojan Downloader Agent BWH, Dec. 19 | 216.195.56.22 3fn.net | 94.247.3.46 Zlkon.lv | 70.38.68.137 iWeb | |||
| Trojan Downloader Agent BWH, Dec. 18 | 216.195.56.22 3fn.net | 94.247.3.46 Zlkon.lv | 70.38.68.137 iWeb | 200.63.45.46 LACNIC? | ||
| Cutwail, Dec. 15 | 216.195.55.50 3fn.net | |||||
| Virut, Dec. 14 | 216.195.56.22 3fn.net | 208.66.194.240 McColo NOC | ||||
| Cutwail, Dec. 10 | 216.195.56.22 3fn.net | 94.247.3.46 Zlkon.lv | 91.203.92.189 UATelecom | |||
| Trojan Downloader Agent BWH, Dec. 9 | 216.195.56.22 3fn.net | 91.203.92.189 UATelecom | 70.38.68.137 iWeb | |||
| Pushdo, Dec. 8 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 208.66.194.232 McColo NOC | |||
| Virut, Dec. 6 | 216.195.56.22 3fn.net | 94.247.3.46 Zlkon.lv | 70.38.68.137 iWeb | proxim.ircgalaxy.pl Hostfresh | ||
| Trojan Downloader Agent BWH, Dec. 6 | 216.195.56.22 3fn.net | 94.247.3.46 Zlkon.lv | 70.38.68.137 iWeb | 200.63.45.46 LACNIC? | ||
| Trojan Downloader Agent BWH, Dec. 5 | 216.195.56.22 3fn.net | 91.203.92.189 UATelecom | ||||
| Cutwail, Dec. 4 | 216.195.55.50 3fn.net | 208.66.195.15 Optimal Solutions/McColo | 208.66.194.240 McColo NOC | |||
| Virut, Dec. 3 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 209.66.122.238 APS Communication | |||
| Cutwail, Dec. 4 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 209.66.122.238 APS Communication | 200.63.45.46 LACNIC? | ||
| Cutwaill, Dec. 2 | 216.195.56.22 3fn.net | |||||
| Cutwail, Dec. 2 | 216.195.55.50 3fn.net | 200.63.45.46 LACNIC? | ||||
| Cutwail, Dec. 1 | 216.195.55.50 3fn.net | 208.66.195.15 Optimal Solutions/McColo | 209.66.122.238 APS Communication | |||
| Cutwail, Dec. 1 | 216.195.55.50 3fn.net | 208.66.194.232 McColo NOC | 91.203.92.7 UATelecom | |||
| Trojan Downloader Agent BWH, Nov. 30 | 216.195.55.50 3fn.net | 200.63.45.46 LACNIC? | 91.203.92.7 UATelecom | |||
| Cutwail, Nov. 29 | 216.195.55.50 3fn.net | |||||
| Haxdoor, Nov. 29 | 216.195.56.22 3fn.net | 200.63.45.46 LACNIC? | 209.66.122.238 APS Communication | |||
| Pushdo, Nov. 29 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 200.63.45.46 LACNIC? | |||
| Cutwail, Nov. 28 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 208.66.194.240 McColo NOC | |||
| Trojan Downloader Agent BWH, Nov. 27 | 216.195.56.22 3fn.net | 70.38.68.137 iWeb | 91.203.92.7 UATelecom | |||
| Cutwail, Nov. 26 | 216.195.56.22 3fn.net | 91.203.92.7 UATelecom | ||||
| Cutwail, Nov. 24 | 216.195.56.22 3fn.net | 208.66.194.232 McColo NOC | ||||
| Cutwail, Nov. 22 | 216.195.54.186 APS Telecom | |||||
| Virut, Nov. 22 | 216.195.56.22 3fn.net | 216.195.55.50 3fn.net | 208.66.194.240 McColo NOC | |||
| Pushdo, Nov. 23 | 216.195.55.50 3fn.net | 208.66.194.232 McColo NOC | 91.203.92.7 UATelecom | |||
| Pushdo, Nov. 21 | 216.195.56.22 3fn.net | 208.66.194.240 McColo NOC | 208.66.195.71 McColo | |||
| Virut, Nov. 20 | 216.195.50.221 APS Telecom | |||||
| Cutwail, Nov. 20 | 216.195.55.50 3fn.net | 209.66.122.238 APS Telecom | 200.63.45.46 LACNIC? | |||
| Pushdo, Nov. 19 | 216.195.55.50 3fn.net | 216.195.56.22 3fn.net | 208.66.194.240 McColo NOC | |||
| Cutwail, Nov. 18 | 216.195.55.50 3fn.net | 209.66.122.238 APS Telecom | ||||
| Trojan Downloader Agent BWH, Nov. 18 | 216.195.55.50 3fn.net | 209.66.122.238 APS Telecom | 200.63.45.46 LACNIC? | |||
| Cutwail, Nov. 17 | 216.195.55.50 3fn.net | |||||
| Virut, Nov. 16 | 216.195.50.221 APS Telecom | |||||
| Virut, Nov. 14 | 216.195.50.221 APS Telecom | |||||
| Cutwail, Nov. 14 | 216.195.50.221 APS Telecom | |||||
| Virut, Nov. 12 | 216.195.55.50 3fn.net | 208.66.195.71 McColo | ||||
| Trojan Downloader Agent BWH, Nov. 11 | 216.195.55.50 3fn.net | 216.195.56.22 3fn.net | 208.66.195.15 Optimal Solutions/McColo | |||
| Trojan Downloader Agent BWH, Nov. 10 | 216.195.55.50 3fn.net | 216.195.56.22 3fn.net | 91.203.92.7 UATelecom | |||
| Cutwail, Nov. 10 | 216.195.55.50 3fn.net | 208.66.194.240 McColo NOC | 208.66.195.15 Optimal Solutions/McColo | |||
| Cutwail, Nov. 5 | 216.195.56.22 3fn.net | |||||
| Cutwail, Nov. 4 | 216.195.56.22 3fn.net | 209.66.122.238 APS Telecom | 91.203.92.7 UATelecom | |||
| Virut, Nov. 4 | 216.195.55.50 3fn.net | 91.203.92.7 UATelecom | ||||
| Pushdo, Oct. 31 | 216.195.56.22 3fn.net | |||||
| Virut, Oct. 31 | 216.195.56.22 3fn.net | 209.66.122.238 APS Telecom | 91.203.92.7 UATelecom | |||
| Cutwail, Oct. 31 | 216.195.55.50 3fn.net | 209.66.122.238 APS Telecom | 208.66.195.71 McColo | |||
| Cutwail, Oct. 30 | 216.195.55.50 3fn.net | 91.203.92.7 UATelecom | 208.66.195.15 Optimal Solutions/McColo | |||
| Pinch, Oct. 29 | 216.195.55.50 3fn.net | 91.203.92.7 UATelecom | 208.66.195.15 Optimal Solutions/McColo | groupa.nad123nad.com | ||
| Trojan Downloader Agent BWH, Oct. 26 | 216.195.55.50 3fn.net | 208.66.194.240 McColo NOC | 208.66.195.15 Optimal Solutions/McColo | |||
| Trojan Buzus, Oct. 22 | 216.195.56.22 3fn.net | 208.66.194.232 McColo NOC | 91.203.92.7 UATelecom | |||