| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 87.251.64.128/26 | 2697 | 7/64 (11%) | 50% | 295 |
| 80.94.92.160/27 | 882 | 4/32 (13%) | 50% | 110 |
| 167.94.146.48/28 | 42 | 15/16 (94%) | 75% | 39 |
| 66.132.195.0/25 | 99 | 47/128 (37%) | 75% | 36 |
| 103.173.7.160/28 | 116 | 4/16 (25%) | 25% | 29 |
| 160.119.76.0/25 | 200 | 13/128 (10%) | 75% | 20 |
| 195.140.214.16/28 | 20 | 10/16 (63%) | 75% | 13 |
| 177.8.1.4/30 | 10 | 4/4 (100%) | 25% | 10 |
| 37.10.113.208/28 | 16 | 10/16 (63%) | 50% | 10 |
| 193.124.20.224/27 | 25 | 11/32 (34%) | 50% | 9 |
Top 10 shown for demo purposes. The full feed currently contains 524 IP addresses in 13 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale