It is not clear whether the IPs listed in the report were part of a command and control infrastructure or simply bots - or both.