| Swarm | Attacks | Attackers (%) | RIFE Score | Swarm Points |
| 195.178.110.32/27 | 1258 | 7/32 (22%) | 33% | 275 |
| 66.132.172.0/24 | 313 | 68/256 (27%) | 100% | 83 |
| 66.132.195.0/25 | 191 | 50/128 (39%) | 100% | 75 |
| 167.94.146.48/28 | 47 | 13/16 (81%) | 100% | 38 |
| 66.132.186.128/25 | 135 | 31/128 (24%) | 100% | 33 |
| 109.105.211.0/27 | 38 | 15/32 (47%) | 67% | 18 |
| 45.82.78.96/28 | 35 | 4/16 (25%) | 100% | 9 |
| 216.218.206.64/29 | 14 | 4/8 (50%) | 100% | 7 |
| 65.49.20.64/29 | 13 | 4/8 (50%) | 100% | 7 |
| 74.82.47.0/29 | 10 | 4/8 (50%) | 100% | 5 |
Top 10 shown for demo purposes. The full feed currently contains 752 IP addresses in 16 swarms.
Swarm points are the product of attacks and density of attackers in a swarm range
RIFE score approximates how widespread the malicious activity is at Internet-scale