| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 2.57.122.128/25 | 648 | 13/128 (10%) | 50% | 66 |
| 85.217.149.0/25 | 142 | 56/128 (44%) | 150% | 62 |
| 80.94.92.160/27 | 383 | 5/32 (16%) | 50% | 60 |
| 66.132.195.0/25 | 153 | 43/128 (34%) | 150% | 51 |
| 87.251.64.144/29 | 65 | 5/8 (63%) | 50% | 41 |
| 167.94.146.48/28 | 37 | 10/16 (63%) | 150% | 23 |
| 66.132.186.128/25 | 97 | 26/128 (20%) | 150% | 20 |
| 194.88.98.80/28 | 18 | 10/16 (63%) | 150% | 11 |
| 37.10.113.208/28 | 22 | 7/16 (44%) | 150% | 10 |
| 193.176.31.144/28 | 16 | 8/16 (50%) | 150% | 8 |
Top 10 shown for demo purposes. The full feed currently contains 728 IP addresses in 17 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale