| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 87.251.64.128/26 | 1995 | 7/64 (11%) | 50% | 218 |
| 80.94.92.160/27 | 569 | 4/32 (13%) | 50% | 71 |
| 2.57.122.128/25 | 425 | 13/128 (10%) | 50% | 43 |
| 66.132.195.0/25 | 111 | 41/128 (32%) | 75% | 36 |
| 167.94.146.48/28 | 36 | 13/16 (81%) | 75% | 29 |
| 195.140.214.16/28 | 31 | 12/16 (75%) | 50% | 23 |
| 194.88.98.80/28 | 30 | 11/16 (69%) | 50% | 21 |
| 193.124.20.224/27 | 36 | 13/32 (41%) | 50% | 15 |
| 37.10.113.208/28 | 20 | 11/16 (69%) | 50% | 14 |
| 185.226.197.32/30 | 13 | 4/4 (100%) | 25% | 13 |
Top 10 shown for demo purposes. The full feed currently contains 568 IP addresses in 16 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale