| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 130.12.180.0/24 | 6007 | 32/256 (13%) | 133% | 751 |
| 80.94.92.160/27 | 1134 | 5/32 (16%) | 67% | 177 |
| 223.123.38.32/29 | 230 | 5/8 (63%) | 67% | 144 |
| 194.165.16.160/29 | 68 | 7/8 (88%) | 33% | 60 |
| 45.227.254.152/29 | 34 | 4/8 (50%) | 33% | 17 |
| 88.214.25.120/29 | 30 | 4/8 (50%) | 33% | 15 |
| 167.94.146.48/28 | 27 | 9/16 (56%) | 133% | 15 |
| 65.49.20.64/29 | 19 | 4/8 (50%) | 100% | 10 |
| 184.105.139.64/29 | 17 | 4/8 (50%) | 67% | 9 |
| 176.65.139.32/28 | 27 | 4/16 (25%) | 67% | 7 |
Top 10 shown for demo purposes. The full feed currently contains 424 IP addresses in 13 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale