Interpol announced 41 arrests and the seizure of hundreds of servers in an operation intended to take down malicious IP addresses used for phishing, ransomware and infostealer malware.

On Tuesday, the intergovernmental organization said it worked with law enforcement agencies from 95 member countries and multiple cybersecurity firms on the second phase of Operation Synergia, which was announced earlier this year.

From April 1 to August 31, Interpol took down more than 22,000 malicious IP addresses — more than three-quarters of the 30,000 that researchers collaborating with law enforcement identified as suspicious.

Alongside the 41 arrests, Interpol seized 43 devices including laptops, phones and hard drives. They noted that 65 other people are still under investigation but were not arrested.

“Together, we’ve not only dismantled malicious infrastructure but also prevented hundreds of thousands of potential victims from falling prey to cybercrime,” said Neal Jetton, Interpol’s Director of the Cybercrime Directorate.

Interpol said it worked with cybersecurity researchers at Team Cymru, Kaspersky, Group-IB and Trend Micro who traced malicious activity back to the IP addresses.