| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 66.132.195.0/25 | 198 | 47/128 (37%) | 67% | 73 |
| 66.132.172.0/24 | 255 | 57/256 (22%) | 67% | 57 |
| 223.123.38.32/29 | 108 | 4/8 (50%) | 67% | 54 |
| 2.57.122.128/25 | 527 | 13/128 (10%) | 67% | 54 |
| 85.217.149.0/25 | 121 | 52/128 (41%) | 67% | 49 |
| 167.94.146.48/28 | 53 | 14/16 (88%) | 67% | 46 |
| 66.132.186.128/25 | 117 | 29/128 (23%) | 67% | 27 |
| 194.88.98.80/28 | 23 | 10/16 (63%) | 67% | 14 |
| 185.226.197.24/29 | 25 | 4/8 (50%) | 67% | 13 |
| 184.105.139.64/29 | 11 | 4/8 (50%) | 67% | 6 |
Top 10 shown for demo purposes. The full feed currently contains 936 IP addresses in 16 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale