| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 193.32.162.144/28 | 561 | 4/16 (25%) | 50% | 140 |
| 80.94.92.160/27 | 793 | 5/32 (16%) | 50% | 124 |
| 194.165.16.160/29 | 52 | 6/8 (75%) | 25% | 39 |
| 167.94.146.48/28 | 39 | 11/16 (69%) | 75% | 27 |
| 88.214.25.120/29 | 31 | 4/8 (50%) | 25% | 16 |
| 45.82.78.96/28 | 32 | 5/16 (31%) | 75% | 10 |
| 65.49.20.64/29 | 9 | 4/8 (50%) | 50% | 5 |
| 216.218.206.64/29 | 7 | 4/8 (50%) | 50% | 4 |
| 106.246.89.64/28 | 9 | 4/16 (25%) | 25% | 2 |
Top 10 shown for demo purposes. The full feed currently contains 128 IP addresses in 9 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale