Radar
radar
AI
radar.ai
Annotations
radar.annotations
Methods
Get the latest annotations.
radar.annotations.outages
Methods
Get latest Internet outages and anomalies.
Get the number of outages by location.
AS112
radar.as112
Methods
Get AS112 queries change over time.
Methods
Percentage distribution of DNS queries to AS112 by DNSSEC support.
Percentage distribution of DNS queries to AS112 by EDNS support.
Percentage distribution of DNS queries to AS112 per IP Version.
Percentage distribution of DNS queries to AS112 per protocol.
Percentage distribution of DNS queries to AS112 by query type.
Percentage distribution of AS112 DNS requests classified by response code.
Methods
Percentage distribution of AS112 DNS queries by DNSSEC support over time.
Percentage distribution of AS112 DNS queries by EDNS support over time.
Percentage distribution of AS112 DNS queries by IP version over time.
Percentage distribution of AS112 DNS requests classified by protocol over time.
Percentage distribution of AS112 DNS queries by query type over time.
Percentage distribution of AS112 DNS requests classified by response code over time.
Methods
Get the top locations of DNS queries to AS112 with DNSSEC.
Get the top locations of DNS queries to AS112 with EDNS support.
Get the top locations of DNS queries to AS112 by IP version.
Get the top locations by AS112 DNS queries. Values are a percentage out of the total queries.
Attacks
radar.attacks
Methods
Percentage distribution of attacks by bitrate.
Percentage distribution of attacks by duration.
Percentage distribution of network protocols in Layer 3/4 attacks over a given time period.
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
Example: Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
Array of comma separated list of ASNs, start with -
to exclude from results. For example, -174, 3356
excludes results from AS174, but includes results from AS3356.
Array of comma separated list of continents (alpha-2 continent codes). Start with -
to exclude from results. For example, -EU,NA
excludes results from Europe, but includes results from North America.
End of the date range (inclusive).
For example, use 7d
and 7dControl
to compare this week with the previous week. Use this parameter or set specific start and end dates (dateStart
and dateEnd
parameters).
Array of datetimes to filter the start of a series.
Format results are returned in.
Array of comma separated list of locations (alpha-2 country codes). Start with -
to exclude from results. For example, -US,PT
excludes results from the US, but includes results from PT.
Array of names that will be used to name the series in responses.
Percentage distribution of attacks by ip version used.
Percentage distribution of attacks by protocol used.
Percentage distribution of attacks by vector.
Methods
Percentage distribution of attacks by bitrate over time.
Percentage distribution of attacks by duration over time.
Get a time series of the percentage distribution of network protocols in Layer 3/4 attacks.
Percentage distribution of attacks by industry targeted over time.
Percentage distribution of attacks by ip version used over time.
Percentage distribution of attacks by protocol used over time.
Percentage distribution of attacks by vector used over time.
Percentage distribution of attacks by vertical targeted over time.
Methods
Get the top attacks from origin to target location. Values are a percentage out of the total layer 3 attacks (with billing country). You can optionally limit the number of attacks per origin/target location (useful if all the top attacks are from or to the same location).
Get the industries targeted by attacks.
Get the verticals targeted by attacks.
Methods
Get the origin locations of attacks.
Get the target locations of attacks.
Methods
Percentage distribution of mitigation techniques in Layer 7 attacks.
Percentage distribution of attacks by http method used.
Percentage distribution of attacks by http version used.
Percentage distribution of attacks by ip version used.
Percentage distribution of attacks by managed rules used.
Percentage distribution of attacks by mitigation product used.
Methods
Get a time series of the distribution of mitigation techniques over time.
Percentage distribution of attacks by http method used over time.
Percentage distribution of attacks by http version used over time.
Percentage distribution of attacks by targeted industry over time.
Percentage distribution of attacks by ip version used over time.
Percentage distribution of attacks by managed rules used over time.
Percentage distribution of attacks by mitigation product used over time.
Percentage distribution of attacks by targeted vertical over time.
Methods
Get the top attacks from origin to target location. Values are a percentage out of the total Layer 7 attacks (with billing country). The attack magnitude can be defined by the number of mitigated requests or by the number of zones affected. You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).
Get the industries targeted by attacks.
Get the verticals targeted by attacks.
Methods
Get the top origin Autonomous Systems of and by Layer 7 attacks. Values are a percentage out of the total Layer 7 attacks. The origin Autonomous Systems is determined by the client IP address.
Methods
Get the top origin locations of and by Layer 7 attacks. Values are a percentage out of the total Layer 7 attacks. The origin location is determined by the client IP address.
Get the top target locations of and by layer 7 attacks. Values are a percentage out of the total layer 7 attacks. The target location is determined by the attacked zone's billing country, when available.
BGP
radar.bgp
Methods
Get BGP updates change over time. Raw values are returned. When requesting updates for an autonomous system (AS), only BGP updates of type announcement are returned.
Methods
List all ASes in current global routing tables with routing statistics
List all Multi-Origin AS (MOAS) prefixes on the global routing tables.
Lookup prefix-to-ASN mapping on global routing tables.
Get the BGP routing table stats (Beta).
Methods
Get the top autonomous systems (ASes) by BGP updates (announcements only). Values are a percentage out of the total updates.
Get the full list of autonomous systems on the global routing table ordered by announced prefixes count. The data comes from public BGP MRT data archives and updates every 2 hours.
Datasets
radar.datasets
Methods
Get a url to download a single dataset.
Get the CSV content of a given dataset by alias or ID. When getting the content by alias the latest dataset is returned, optionally filtered by the latest available at a given date.
Get a list of datasets.
DNS
radar.dns
Methods
Get top autonomous systems by DNS queries made to Cloudflare's public DNS resolver.
Get top locations by DNS queries made to Cloudflare's public DNS resolver.
radar.email
Domain types
Methods
Percentage distribution of emails classified by ARC validation.
Percentage distribution of emails classified by DKIM validation.
Percentage distribution of emails classified by DMARC validation.
Percentage distribution of emails by encryption status.
Percentage distribution of emails by IP version.
Percentage distribution of emails classified by SPF validation.
Methods
Percentage distribution of emails classified by ARC validation over time.
Percentage distribution of emails classified by DKIM validation over time.
Percentage distribution of emails classified by DMARC validation over time.
Percentage distribution of emails by encryption status over time.
Percentage distribution of emails by IP version over time.
Percentage distribution of emails classified by SPF validation over time.
Methods
Percentage distribution of emails classified by ARC validation.
Percentage distribution of emails classified by DKIM validation.
Percentage distribution of emails classified by DMARC validation.
Percentage distribution of emails classified as MALICIOUS.
Proportion of emails categorized as either spam or legitimate (non-spam).
Percentage distribution of emails classified by SPF validation.
Proportion of emails categorized as either spoof or legitimate (non-spoof).
Percentage distribution of emails classified in Threat Categories.
Percentage distribution of emails classified by TLS version.
Methods
Percentage distribution of emails classified by ARC validation over time.
Percentage distribution of emails classified by DKIM validation over time.
Percentage distribution of emails classified by DMARC validation over time.
Percentage distribution of emails classified as MALICIOUS over time.
Percentage distribution of emails classified as SPAM over time.
Percentage distribution of emails classified by SPF validation over time.
Percentage distribution of emails classified as SPOOF over time.
Percentage distribution of emails classified by threat category over time.
Percentage distribution of emails classified by TLS version over time.
Entities
radar.entities
Methods
Get IP address information.
Methods
Get the requested autonomous system information. (A confidence level below 5
indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this AS). Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).
Get the requested autonomous system information based on IP address. Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).
Get a list of autonomous systems (ASes).
Get AS-level relationship for given networks.
Methods
Get the requested location information. (A confidence level below 5
indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this location).
Get a list of locations.
HTTP
radar.http
Methods
Get HTTP requests over time.
Methods
Get the top autonomous systems (AS), by HTTP traffic, of the requested bot class. These two categories use Cloudflare's bot score - refer to Bot Scores for more information. Values are a percentage out of the total traffic.
Methods
Get the top autonomous systems (AS), by HTTP traffic, of the requested browser family. Values are a percentage out of the total traffic.
Methods
Get the top autonomous systems (AS), by HTTP traffic, of the requested device type. Values are a percentage out of the total traffic.
Methods
Get the top autonomous systems (AS), by HTTP traffic, of the requested HTTP version. Values are a percentage out of the total traffic.
Methods
Get the top autonomous systems (AS), by HTTP traffic, of the requested HTTP protocol. Values are a percentage out of the total traffic.
Methods
Get the top autonomous systems (AS), by HTTP traffic, of the requested TLS protocol version. Values are a percentage out of the total traffic.
Methods
Get the top locations, by HTTP traffic, of the requested bot class. These two categories use Cloudflare's bot score - refer to [Bot scores])https://developers.cloudflare.com/bots/concepts/bot-score). Values are a percentage out of the total traffic.
Methods
Get the top locations, by HTTP traffic, of the requested browser family. Values are a percentage out of the total traffic.
Methods
Get the top locations, by HTTP traffic, of the requested device type. Values are a percentage out of the total traffic.
Methods
Get the top locations, by HTTP traffic, of the requested HTTP version. Values are a percentage out of the total traffic.
Methods
Get the top locations, by HTTP traffic, of the requested HTTP protocol. Values are a percentage out of the total traffic.
Methods
Get the top locations, by HTTP traffic, of the requested TLS protocol version. Values are a percentage out of the total traffic.
Methods
Percentage distribution of bot-generated traffic to genuine human traffic, as classified by Cloudflare. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.
Percentage of Internet traffic generated by mobile, desktop, and other types of devices over a given time period.
Percentage distribution of traffic by HTTP protocol over a given time period.
Percentage distribution of traffic by HTTP version over a given time period.
Percentage distribution of Internet traffic based on IP versions (IPv4 and IPv6) over a given time period.
Percentage distribution of Internet traffic generated by different operating systems like Windows, macOS, Android, iOS, and others, over a given time period.
Percentage distribution of traffic by post-quantum support over a given time period.
Percentage distribution of traffic by TLS protocol version, over a given time period.
Methods
Get a time series of the percentage distribution of traffic classified as automated or human. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.
Get a time series of the percentage distribution of traffic of the top user agents.
Get a time series of the percentage distribution of traffic of the top user agents aggregated in families.
Get a time series of the percentage distribution of traffic by device type.
Get a time series of the percentage distribution of traffic by HTTP protocol.
Get a time series of the percentage distribution of traffic by HTTP version.
Get a time series of the percentage distribution of traffic by IP version.
Get a time series of the percentage distribution of traffic of the top operating systems.
Get a time series of the percentage distribution of traffic by post-quantum suport.
Get a time series of the percentage distribution of traffic by TLS protocol version.
Methods
Get the top user agents by HTTP traffic. Values are a percentage out of the total traffic.
Get the top user agents aggregated in families by HTTP traffic. Values are a percentage out of the total traffic.
Netflows
radar.netflows
Methods
Percentage distribution of HTTP vs other protocols traffic over a given time period.
Get network traffic change over time. Visit https://en.wikipedia.org/wiki/NetFlow for more information on NetFlows.
Methods
Get the top autonomous systems (AS) by network traffic (NetFlows) over a given time period. Visit https://en.wikipedia.org/wiki/NetFlow for more information.
Get the top locations by network traffic (NetFlows) over a given time period. Visit https://en.wikipedia.org/wiki/NetFlow for more information.
Quality
radar.quality
Methods
Get a summary (percentiles) of bandwidth, latency or DNS response time from the Radar Internet Quality Index (IQI).
Get a time series (percentiles) of bandwidth, latency or DNS response time from the Radar Internet Quality Index (IQI).
Methods
Get an histogram from the previous 90 days of Cloudflare Speed Test data, split into fixed bandwidth (Mbps), latency (ms) or jitter (ms) buckets.
Get a summary of bandwidth, latency, jitter and packet loss, from the previous 90 days of Cloudflare Speed Test data.
Methods
Get the top autonomous systems by bandwidth, latency, jitter or packet loss, from the previous 90 days of Cloudflare Speed Test data.
Get the top locations by bandwidth, latency, jitter or packet loss, from the previous 90 days of Cloudflare Speed Test data.
Ranking
radar.ranking
Methods
Gets Domains Rank updates change over time. Raw values are returned.
Get top or trending domains based on their rank. Popular domains are domains of broad appeal based on how people use the Internet. Trending domains are domains that are generating a surge in interest. For more information on top domains, see https://blog.cloudflare.com/radar-domain-rankings/.
Methods
Gets Domains Rank details. Cloudflare provides an ordered rank for the top 100 domains, but for the remainder it only provides ranking buckets like top 200 thousand, top one million, etc.. These are available through Radar datasets endpoints.
Search
radar.search
Methods
Lets you search for locations, autonomous systems (ASes), and reports.
TCP Resets Timeouts
radar.tcp_resets_timeouts
Methods
Percentage distribution by connection stage of TCP connections terminated within the first 10 packets by a reset or timeout, for a given time period.
Percentage distribution by connection stage of TCP connections terminated within the first 10 packets by a reset or timeout, over time.
Traffic Anomalies
radar.traffic_anomalies
Methods
Internet traffic anomalies are signals that might point to an outage. These alerts are automatically detected by Radar and then manually verified by our team. This endpoint returns the latest alerts.
radar.traffic_anomalies.locations
Methods
Internet traffic anomalies are signals that might point to an outage. These alerts are automatically detected by Radar and then manually verified by our team. This endpoint returns the sum of alerts grouped by location.
Verified Bots
radar.verified_bots
radar.verified_bots.top
Methods
Get top verified bots by HTTP requests, with owner and category.
Get top verified bot categories by HTTP requests, along with their corresponding percentage, over the total verified bot HTTP requests.