Cloudflare API | Radar › Attacks › Layer7 › Top › Get Top Attack Pairs Origin And Target Locations By Layer 7 Attacks

Get the top attacks from origin to target location. Values are a percentage out of the total layer 3 attacks (with billing country). You can optionally limit the number of attacks per origin/target location (useful if all the top attacks are from or to the same location).

Get Top Industry Of Attack -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer3/top/industry

Get the industries targeted by attacks.

Get Top Verticals Of Attack -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer3/top/vertical

Get the verticals targeted by attacks.

Radar Attacks Layer3 Top

Locations

radar.attacks.layer3.top.locations

Methods

Get Top Origin Locations Of Attack -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer3/top/locations/origin

Get the origin locations of attacks.

Get Top Target Locations Of Attack -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer3/top/locations/target

Get the target locations of attacks.

Radar Attacks

Layer7

radar.attacks.layer7

Methods

Get Layer 7 Attacks Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries

Get a timeseries of Layer 7 attacks. Values represent HTTP requests and are normalized using min-max by default.

Radar Attacks Layer7

Summary

radar.attacks.layer7.summary

Methods

Get Layer 7 Attacks Summary -> Envelope<{ meta, summary_0 }>

get/radar/attacks/layer7/summary

Percentage distribution of mitigation techniques in Layer 7 attacks.

Get HTTP Method Summary -> Envelope<{ meta, summary_0 }>

get/radar/attacks/layer7/summary/http_method

Percentage distribution of attacks by http method used.

Get HTTP Version Summary -> Envelope<{ meta, summary_0 }>

get/radar/attacks/layer7/summary/http_version

Percentage distribution of attacks by http version used.

Get IP Version Summary -> Envelope<{ meta, summary_0 }>

get/radar/attacks/layer7/summary/ip_version

Percentage distribution of attacks by ip version used.

Get Managed Rules Summary -> Envelope<{ meta, summary_0 }>

get/radar/attacks/layer7/summary/managed_rules

Percentage distribution of attacks by managed rules used.

Get Mitigation Product Summary -> Envelope<{ meta, summary_0 }>

get/radar/attacks/layer7/summary/mitigation_product

Percentage distribution of attacks by mitigation product used.

Radar Attacks Layer7

Timeseries Groups

radar.attacks.layer7.timeseries_groups

Methods

Get Layer 7 Attacks By Mitigation Technique Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups

Get a time series of the distribution of mitigation techniques over time.

Get Layer 7 Attacks By HTTP Method Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/http_method

Percentage distribution of attacks by http method used over time.

Get Layer 7 Attacks By HTTP Version Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/http_version

Percentage distribution of attacks by http version used over time.

Get Layer 7 Attacks By Target Industries Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/industry

Percentage distribution of attacks by targeted industry over time.

Get Layer 7 Attacks By IP Version Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/ip_version

Percentage distribution of attacks by ip version used over time.

Get Layer 7 Attacks By Managed Rules Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/managed_rules

Percentage distribution of attacks by managed rules used over time.

Get Layer 7 Attacks By Mitigation Product Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/mitigation_product

Percentage distribution of attacks by mitigation product used over time.

Get Layer 7 Attacks By Vertical Time Series -> Envelope<{ meta, serie_0 }>

get/radar/attacks/layer7/timeseries_groups/vertical

Percentage distribution of attacks by targeted vertical over time.

Radar Attacks Layer7

Top

radar.attacks.layer7.top

Methods

Get Top Attack Pairs Origin And Target Locations By Layer 7 Attacks -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer7/top/attacks

Get the top attacks from origin to target location. Values are a percentage out of the total Layer 7 attacks (with billing country). The attack magnitude can be defined by the number of mitigated requests or by the number of zones affected. You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).

Security

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example: Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

Parameters

asn: Array<string>

Optional

Array of comma separated list of ASNs, start with - to exclude from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.

continent: Array<string>

Optional

Array of comma separated list of continents (alpha-2 continent codes). Start with - to exclude from results. For example, -EU,NA excludes results from Europe, but includes results from North America.

dateEnd: Array<string>

Optional

End of the date range (inclusive).

dateRange: Array<string>

Optional

For example, use 7d and 7dControl to compare this week with the previous week. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).

dateStart: Array<string>

Optional

Array of datetimes to filter the start of a series.

format:

Optional

Format results are returned in.

"JSON"

"CSV"

httpMethod: Array<

Optional

Filter for http method.

"GET"

"POST"

"DELETE"

"PUT"

"HEAD"

"PURGE"

"OPTIONS"

"PROPFIND"

"MKCOL"

"PATCH"

"ACL"

"BCOPY"

"BDELETE"

"BMOVE"

"BPROPFIND"

"BPROPPATCH"

"CHECKIN"

"CHECKOUT"

"CONNECT"

"COPY"

"LABEL"

"LOCK"

"MERGE"

"MKACTIVITY"

"MKWORKSPACE"

"MOVE"

"NOTIFY"

"ORDERPATCH"

"POLL"

"PROPPATCH"

"REPORT"

"SEARCH"

"SUBSCRIBE"

"TRACE"

"UNCHECKOUT"

"UNLOCK"

"UNSUBSCRIBE"

"UPDATE"

"VERSIONCONTROL"

"BASELINECONTROL"

"XMSENUMATTS"

"RPC_OUT_DATA"

"RPC_IN_DATA"

"JSON"

"COOK"

"TRACK"

httpVersion: Array<

Optional

Filter for http version.

"HTTPv1"

"HTTPv2"

"HTTPv3"

ipVersion: Array<

Optional

Filter for ip version.

"IPv4"

"IPv6"

limit: number

Optional

Limit the number of objects in the response.

limitDirection:

Optional

Array of attack origin/target location attack limits. Together with limitPerLocation, limits how many objects will be fetched per origin/target location.

"ORIGIN"

"TARGET"

limitPerLocation: number

Optional

Limit the number of attacks per origin/target (refer to limitDirection parameter) location.

location: Array<string>

Optional

Array of comma separated list of locations (alpha-2 country codes). Start with - to exclude from results. For example, -US,PT excludes results from the US, but includes results from PT.

magnitude:

Optional

Attack magnitude can be defined by total requests mitigated or by total zones attacked.

"AFFECTED_ZONES"

"MITIGATED_REQUESTS"

mitigationProduct: Array<

Optional

Array of L7 mitigation products.

"DDOS"

"WAF"

"BOT_MANAGEMENT"

"ACCESS_RULES"

"IP_REPUTATION"

"API_SHIELD"

"DATA_LOSS_PREVENTION"

name: Array<string>

Optional

Array of names that will be used to name the series in responses.

normalization:

Optional

Normalization method applied. Refer to Normalization methods.

"PERCENTAGE"

"MIN_MAX"

Response fields

result: { meta, top_0 }

success: boolean

Request example

curl https://api.cloudflare.com/client/v4/radar/attacks/layer7/top/attacks \
    -H "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    -H "X-Auth-Key: $CLOUDFLARE_API_KEY"

200Example

{
  "result": {
    "meta": {
      "dateRange": [
        {
          "endTime": "2022-09-17T10:22:57.555Z",
          "startTime": "2022-09-16T10:22:57.555Z"
        }
      ],
      "lastUpdated": "2023-07-26T08:59:57Z",
      "confidenceInfo": {
        "annotations": [
          {
            "dataSource": "ALL",
            "description": "Cable cut in Tonga",
            "eventType": "OUTAGE",
            "isInstantaneous": true,
            "endTime": "2019-12-27T18:11:19.117Z",
            "linkedUrl": "linkedUrl",
            "startTime": "2019-12-27T18:11:19.117Z"
          }
        ],
        "level": 0
      }
    },
    "top_0": [
      {
        "originCountryAlpha2": "US",
        "originCountryName": "United States",
        "targetCountryAlpha2": "FR",
        "targetCountryName": "France",
        "value": "4.323214"
      }
    ]
  },
  "success": true
}

Get Top Industry Of Attack -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer7/top/industry

Get the industries targeted by attacks.

Get Top Verticals Of Attack -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer7/top/vertical

Get the verticals targeted by attacks.

Radar Attacks Layer7 Top

Ases

radar.attacks.layer7.top.ases

Methods

Get Top Origin Autonomous Systems By Layer 7 Attacks -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer7/top/ases/origin

Get the top origin Autonomous Systems of and by Layer 7 attacks. Values are a percentage out of the total Layer 7 attacks. The origin Autonomous Systems is determined by the client IP address.

Radar Attacks Layer7 Top

Locations

radar.attacks.layer7.top.locations

Methods

Get Top Origin Locations By Layer 7 Attacks -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer7/top/locations/origin

Get the top origin locations of and by Layer 7 attacks. Values are a percentage out of the total Layer 7 attacks. The origin location is determined by the client IP address.

Get Layer 7 Top Target Locations -> Envelope<{ meta, top_0 }>

get/radar/attacks/layer7/top/locations/target

Get the top target locations of and by layer 7 attacks. Values are a percentage out of the total layer 7 attacks. The target location is determined by the attacked zone's billing country, when available.

Radar

BGP

radar.bgp

Methods

Get BGP Time Series -> Envelope<{ meta, serie_0 }>

get/radar/bgp/timeseries

Get BGP updates change over time. Raw values are returned. When requesting updates for an autonomous system (AS), only BGP updates of type announcement are returned.

Radar BGP

Hijacks

radar.bgp.hijacks

Radar BGP Hijacks

Events

radar.bgp.hijacks.events

Methods

Get BGP Hijack Events -> V4PagePagination<{ asn_info, events, total_monitors }>

get/radar/bgp/hijacks/events

Get the BGP hijack events. (Beta)

Radar BGP

IPs

radar.bgp.ips

Methods

Get BGP IP Space Time Series -> Envelope<{ meta, serie_174 }>

get/radar/bgp/ips/timeseries

Get time series data for the announced IP space count, represented as the number of IPv4 /24s and IPv6 /48s, for a given ASN.

Radar BGP

Leaks

radar.bgp.leaks

Radar BGP Leaks

Events

radar.bgp.leaks.events

Methods

Get BGP Route Leak Events -> V4PagePagination<{ asn_info, events }>

get/radar/bgp/leaks/events

Get the BGP route leak events (Beta).

Radar BGP

Routes

radar.bgp.routes

Methods

List A Ses From Global Routing Tables -> Envelope<{ asns, meta }>

get/radar/bgp/routes/ases

List all ASes in current global routing tables with routing statistics

Get Moa Ses -> Envelope<{ meta, moas }>

get/radar/bgp/routes/moas

List all Multi-Origin AS (MOAS) prefixes on the global routing tables.

Get Prefix To ASN Mapping -> Envelope<{ meta, prefix_origins }>

get/radar/bgp/routes/pfx2as

Lookup prefix-to-ASN mapping on global routing tables.

Get BGP Routing Table Stats -> Envelope<{ meta, stats }>

get/radar/bgp/routes/stats

Get the BGP routing table stats (Beta).

Radar BGP

Top

radar.bgp.top

Methods

Get Top Prefixes -> Envelope<{ meta, top_0 }>

get/radar/bgp/top/prefixes

Get the top network prefixes by BGP updates. Values are a percentage out of the total BGP updates.

Radar BGP Top

Ases

radar.bgp.top.ases

Methods

Get Top Autonomous Systems -> Envelope<{ meta, top_0 }>

get/radar/bgp/top/ases

Get the top autonomous systems (ASes) by BGP updates (announcements only). Values are a percentage out of the total updates.

Get List Of ASNs Ordered By Prefix Count -> Envelope<{ asns, meta }>

get/radar/bgp/top/ases/prefixes

Get the full list of autonomous systems on the global routing table ordered by announced prefixes count. The data comes from public BGP MRT data archives and updates every 2 hours.

Radar

Datasets

radar.datasets

Methods

Get Dataset Download URL -> Envelope<{ dataset }>

post/radar/datasets/download

Get a url to download a single dataset.

Get Dataset Csv Stream -> string

get/radar/datasets/{alias}

Get the CSV content of a given dataset by alias or ID. When getting the content by alias the latest dataset is returned, optionally filtered by the latest available at a given date.

Get Datasets -> Envelope<{ datasets }>

get/radar/datasets

Get a list of datasets.

Radar

DNS

radar.dns

Radar DNS

Top

radar.dns.top

Methods

Get Top Autonomous Systems By DNS Queries -> Envelope<{ meta, top_0 }>

get/radar/dns/top/ases

Get top autonomous systems by DNS queries made to Cloudflare's public DNS resolver.

Get Top Locations By DNS Queries -> Envelope<{ meta, top_0 }>

get/radar/dns/top/locations

Get top locations by DNS queries made to Cloudflare's public DNS resolver.

Radar

Email

radar.email

Domain types

RadarEmailSeries = { FAIL, NONE, PASS }

RadarEmailSummary = { FAIL, NONE, PASS }

Radar Email

Routing

radar.email.routing

Radar Email Routing

Summary

radar.email.routing.summary

Methods

Get ARC Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/routing/summary/arc

Percentage distribution of emails classified by ARC validation.

Get DKIM Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/routing/summary/dkim

Percentage distribution of emails classified by DKIM validation.

Get DMARC Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/routing/summary/dmarc

Percentage distribution of emails classified by DMARC validation.

Get Encrypted Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/routing/summary/encrypted

Percentage distribution of emails by encryption status.

Get IP Version Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/routing/summary/ip_version

Percentage distribution of emails by IP version.

Get SPF Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/routing/summary/spf

Percentage distribution of emails classified by SPF validation.

Radar Email Routing

Timeseries Groups

radar.email.routing.timeseries_groups

Methods

Get ARC Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/routing/timeseries_groups/arc

Percentage distribution of emails classified by ARC validation over time.

Get DKIM Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/routing/timeseries_groups/dkim

Percentage distribution of emails classified by DKIM validation over time.

Get DMARC Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/routing/timeseries_groups/dmarc

Percentage distribution of emails classified by DMARC validation over time.

Get Encrypted Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/routing/timeseries_groups/encrypted

Percentage distribution of emails by encryption status over time.

Get IP Version Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/routing/timeseries_groups/ip_version

Percentage distribution of emails by IP version over time.

Get SPF Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/routing/timeseries_groups/spf

Percentage distribution of emails classified by SPF validation over time.

Radar Email

Security

radar.email.security

Radar Email Security

Summary

radar.email.security.summary

Methods

Get ARC Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/arc

Percentage distribution of emails classified by ARC validation.

Get DKIM Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/dkim

Percentage distribution of emails classified by DKIM validation.

Get DMARC Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/dmarc

Percentage distribution of emails classified by DMARC validation.

Get Malicious Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/malicious

Percentage distribution of emails classified as MALICIOUS.

Get Spam Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/spam

Proportion of emails categorized as either spam or legitimate (non-spam).

Get SPF Validations Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/spf

Percentage distribution of emails classified by SPF validation.

Get Spoof Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/spoof

Proportion of emails categorized as either spoof or legitimate (non-spoof).

Get Threat Categories Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/threat_category

Percentage distribution of emails classified in Threat Categories.

Get TLS Version Summary -> Envelope<{ meta, summary_0 }>

get/radar/email/security/summary/tls_version

Percentage distribution of emails classified by TLS version.

Radar Email Security

Timeseries Groups

radar.email.security.timeseries_groups

Methods

Get ARC Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/arc

Percentage distribution of emails classified by ARC validation over time.

Get DKIM Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/dkim

Percentage distribution of emails classified by DKIM validation over time.

Get DMARC Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/dmarc

Percentage distribution of emails classified by DMARC validation over time.

Get Malicious Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/malicious

Percentage distribution of emails classified as MALICIOUS over time.

Get Spam Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/spam

Percentage distribution of emails classified as SPAM over time.

Get SPF Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/spf

Percentage distribution of emails classified by SPF validation over time.

Get Spoof Validations Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/spoof

Percentage distribution of emails classified as SPOOF over time.

Get Threat Categories Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/threat_category

Percentage distribution of emails classified by threat category over time.

Get TLS Version Time Series -> Envelope<{ meta, serie_0 }>

get/radar/email/security/timeseries_groups/tls_version

Percentage distribution of emails classified by TLS version over time.

Radar Email Security

Top

radar.email.security.top

Radar Email Security Top

Tlds

radar.email.security.top.tlds

Methods

Get Top Tl DS By Email Messages -> Envelope<{ meta, top_0 }>

get/radar/email/security/top/tlds

Get the top TLDs by email messages. Values are a percentage out of total email volume.

Radar Email Security Top Tlds

Malicious

radar.email.security.top.tlds.malicious

Methods

Get Top Tl DS By Malicious Classification -> Envelope<{ meta, top_0 }>

get/radar/email/security/top/tlds/malicious/{malicious}

Get the TLDs by emails classified as malicious or not.

Radar Email Security Top Tlds

Spam

radar.email.security.top.tlds.spam

Methods

Get Top Tl DS By Spam Classification -> Envelope<{ meta, top_0 }>

get/radar/email/security/top/tlds/spam/{spam}

Get the top TLDs by emails classified as spam or not.

Radar Email Security Top Tlds

Spoof

radar.email.security.top.tlds.spoof

Methods

Get Top Tl DS By Spoof Classification -> Envelope<{ meta, top_0 }>

get/radar/email/security/top/tlds/spoof/{spoof}

Get the TLDs by emails classified as spoof or not.

Radar

Entities

radar.entities

Methods

Get IP Address -> Envelope<{ ip }>

get/radar/entities/ip

Get IP address information.

Radar Entities

ASNs

radar.entities.asns

Methods

Get Autonomous System Information By As Number -> Envelope<{ asn }>

get/radar/entities/asns/{asn}

Get the requested autonomous system information. (A confidence level below 5 indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this AS). Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).

Get Autonomous System Information By IP Address -> Envelope<{ asn }>

get/radar/entities/asns/ip

Get the requested autonomous system information based on IP address. Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).

Get Autonomous Systems -> Envelope<{ asns }>

get/radar/entities/asns

Get a list of autonomous systems (ASes).

Get As Level Relationships By As Number -> Envelope<{ meta, rels }>

get/radar/entities/asns/{asn}/rel

Get AS-level relationship for given networks.

Radar Entities

Locations

radar.entities.locations

Methods

Get Location -> Envelope<{ location }>

get/radar/entities/locations/{location}

Get the requested location information. (A confidence level below 5 indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this location).

Get Locations -> Envelope<{ locations }>

get/radar/entities/locations

Get a list of locations.

Radar

HTTP

radar.http

Methods

Get HTTP Requests Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries

Get HTTP requests over time.

Radar HTTP

Ases

radar.http.ases

Methods

Get Top Autonomous Systems By HTTP Requests -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases

Get the top autonomous systems by HTTP traffic. Values are a percentage out of the total traffic.

Radar HTTP Ases

Bot Class

radar.http.ases.bot_class

Methods

Get Top Autonomous Systems By Bot Class -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/bot_class/{bot_class}

Get the top autonomous systems (AS), by HTTP traffic, of the requested bot class. These two categories use Cloudflare's bot score - refer to Bot Scores for more information. Values are a percentage out of the total traffic.

Radar HTTP Ases

Browser Family

radar.http.ases.browser_family

Methods

Get Top Autonomous Systems By Browser Family -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/browser_family/{browser_family}

Get the top autonomous systems (AS), by HTTP traffic, of the requested browser family. Values are a percentage out of the total traffic.

Radar HTTP Ases

Device Type

radar.http.ases.device_type

Methods

Get Top Autonomous Systems By Device Type -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/device_type/{device_type}

Get the top autonomous systems (AS), by HTTP traffic, of the requested device type. Values are a percentage out of the total traffic.

Radar HTTP Ases

HTTP Method

radar.http.ases.http_method

Methods

Get Top Autonomous Systems By HTTP Version -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/http_version/{http_version}

Get the top autonomous systems (AS), by HTTP traffic, of the requested HTTP version. Values are a percentage out of the total traffic.

Radar HTTP Ases

HTTP Protocol

radar.http.ases.http_protocol

Methods

Get Top Autonomous Systems By HTTP Protocol -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/http_protocol/{http_protocol}

Get the top autonomous systems (AS), by HTTP traffic, of the requested HTTP protocol. Values are a percentage out of the total traffic.

Radar HTTP Ases

IP Version

radar.http.ases.ip_version

Methods

Get Top Autonomous Systems By IP Version -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/ip_version/{ip_version}

Get the top autonomous systems, by HTTP traffic, of the requested IP version. Values are a percentage out of the total traffic.

Radar HTTP Ases

OS

radar.http.ases.os

Methods

Get Top Autonomous Systems By Operating System -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/os/{os}

Get the top autonomous systems, by HTTP traffic, of the requested operating systems. Values are a percentage out of the total traffic.

Radar HTTP Ases

TLS Version

radar.http.ases.tls_version

Methods

Get Top Autonomous Systems By TLS Version -> Envelope<{ meta, top_0 }>

get/radar/http/top/ases/tls_version/{tls_version}

Get the top autonomous systems (AS), by HTTP traffic, of the requested TLS protocol version. Values are a percentage out of the total traffic.

Radar HTTP

Locations

radar.http.locations

Methods

Get Top Locations By HTTP Requests -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations

Get the top locations by HTTP traffic. Values are a percentage out of the total traffic.

Radar HTTP Locations

Bot Class

radar.http.locations.bot_class

Methods

Get Top Locations By Bot Class -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/bot_class/{bot_class}

Get the top locations, by HTTP traffic, of the requested bot class. These two categories use Cloudflare's bot score - refer to [Bot scores])https://developers.cloudflare.com/bots/concepts/bot-score). Values are a percentage out of the total traffic.

Radar HTTP Locations

Browser Family

radar.http.locations.browser_family

Methods

Get Top Locations By Browser Family -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/browser_family/{browser_family}

Get the top locations, by HTTP traffic, of the requested browser family. Values are a percentage out of the total traffic.

Radar HTTP Locations

Device Type

radar.http.locations.device_type

Methods

Get Top Locations By Device Type -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/device_type/{device_type}

Get the top locations, by HTTP traffic, of the requested device type. Values are a percentage out of the total traffic.

Radar HTTP Locations

HTTP Method

radar.http.locations.http_method

Methods

Get Top Locations By HTTP Version -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/http_version/{http_version}

Get the top locations, by HTTP traffic, of the requested HTTP version. Values are a percentage out of the total traffic.

Radar HTTP Locations

HTTP Protocol

radar.http.locations.http_protocol

Methods

Get Top Locations By HTTP Protocol -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/http_protocol/{http_protocol}

Get the top locations, by HTTP traffic, of the requested HTTP protocol. Values are a percentage out of the total traffic.

Radar HTTP Locations

IP Version

radar.http.locations.ip_version

Methods

Get Top Locations By IP Version -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/ip_version/{ip_version}

Get the top locations, by HTTP traffic, of the requested IP version. Values are a percentage out of the total traffic.

Radar HTTP Locations

OS

radar.http.locations.os

Methods

Get Top Locations By Operating System -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/os/{os}

Get the top locations, by HTTP traffic, of the requested operating systems. Values are a percentage out of the total traffic.

Radar HTTP Locations

TLS Version

radar.http.locations.tls_version

Methods

Get Top Locations By TLS Version -> Envelope<{ meta, top_0 }>

get/radar/http/top/locations/tls_version/{tls_version}

Get the top locations, by HTTP traffic, of the requested TLS protocol version. Values are a percentage out of the total traffic.

Radar HTTP

Summary

radar.http.summary

Methods

Get Bot Class Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/bot_class

Percentage distribution of bot-generated traffic to genuine human traffic, as classified by Cloudflare. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.

Get Device Type Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/device_type

Percentage of Internet traffic generated by mobile, desktop, and other types of devices over a given time period.

Get HTTP Protocols Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/http_protocol

Percentage distribution of traffic by HTTP protocol over a given time period.

Get HTTP Versions Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/http_version

Percentage distribution of traffic by HTTP version over a given time period.

Get IP Version Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/ip_version

Percentage distribution of Internet traffic based on IP versions (IPv4 and IPv6) over a given time period.

Get Operating Systems Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/os

Percentage distribution of Internet traffic generated by different operating systems like Windows, macOS, Android, iOS, and others, over a given time period.

Get HTTP Post Quantum Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/post_quantum

Percentage distribution of traffic by post-quantum support over a given time period.

Get TLS Version Summary -> Envelope<{ meta, summary_0 }>

get/radar/http/summary/tls_version

Percentage distribution of traffic by TLS protocol version, over a given time period.

Radar HTTP

Timeseries Groups

radar.http.timeseries_groups

Methods

Get Bot Classes Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/bot_class

Get a time series of the percentage distribution of traffic classified as automated or human. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.

Get User Agents Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/browser

Get a time series of the percentage distribution of traffic of the top user agents.

Get User Agent Families Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/browser_family

Get a time series of the percentage distribution of traffic of the top user agents aggregated in families.

Get Device Types Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/device_type

Get a time series of the percentage distribution of traffic by device type.

Get HTTP Protocols Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/http_protocol

Get a time series of the percentage distribution of traffic by HTTP protocol.

Get HTTP Versions Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/http_version

Get a time series of the percentage distribution of traffic by HTTP version.

Get IP Versions Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/ip_version

Get a time series of the percentage distribution of traffic by IP version.

Get Operating Systems Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/os

Get a time series of the percentage distribution of traffic of the top operating systems.

Get HTTP Post Quantum Support Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/post_quantum

Get a time series of the percentage distribution of traffic by post-quantum suport.

Get TLS Versions Time Series -> Envelope<{ meta, serie_0 }>

get/radar/http/timeseries_groups/tls_version

Get a time series of the percentage distribution of traffic by TLS protocol version.

Radar HTTP

Top

radar.http.top

Methods

Get Top User Agents By HTTP Requests -> Envelope<{ meta, top_0 }>

get/radar/http/top/browser

Get the top user agents by HTTP traffic. Values are a percentage out of the total traffic.

Get Top User Agents Families By HTTP Requests -> Envelope<{ meta, top_0 }>

get/radar/http/top/browser_family

Get the top user agents aggregated in families by HTTP traffic. Values are a percentage out of the total traffic.

Radar

Netflows

radar.netflows

Methods

Get Net Flows Summary -> Envelope<{ meta, summary_0 }>

get/radar/netflows/summary

Percentage distribution of HTTP vs other protocols traffic over a given time period.

Get Net Flows Time Series -> Envelope<{ meta, serie_0 }>

get/radar/netflows/timeseries

Get network traffic change over time. Visit https://en.wikipedia.org/wiki/NetFlow for more information on NetFlows.

Radar Netflows

Top

radar.netflows.top

Methods

Get Top Autonomous Systems By Network Traffic -> Envelope<{ top_0 }>

get/radar/netflows/top/ases

Get the top autonomous systems (AS) by network traffic (NetFlows) over a given time period. Visit https://en.wikipedia.org/wiki/NetFlow for more information.

Get Top Locations By Network Traffic -> Envelope<{ top_0 }>

get/radar/netflows/top/locations

Get the top locations by network traffic (NetFlows) over a given time period. Visit https://en.wikipedia.org/wiki/NetFlow for more information.

Radar

Quality

radar.quality

Radar Quality

IQI

radar.quality.iqi

Methods

Get Internet Quality Index IQI Summary -> Envelope<{ meta, summary_0 }>

get/radar/quality/iqi/summary

Get a summary (percentiles) of bandwidth, latency or DNS response time from the Radar Internet Quality Index (IQI).

Get Internet Quality Index IQI Time Series -> Envelope<{ meta, serie_0 }>

get/radar/quality/iqi/timeseries_groups

Get a time series (percentiles) of bandwidth, latency or DNS response time from the Radar Internet Quality Index (IQI).

Radar Quality

Speed

radar.quality.speed

Methods

Get Speed Tests Histogram -> Envelope<{ histogram_0, meta }>

get/radar/quality/speed/histogram

Get an histogram from the previous 90 days of Cloudflare Speed Test data, split into fixed bandwidth (Mbps), latency (ms) or jitter (ms) buckets.

Get Speed Tests Summary -> Envelope<{ meta, summary_0 }>

get/radar/quality/speed/summary

Get a summary of bandwidth, latency, jitter and packet loss, from the previous 90 days of Cloudflare Speed Test data.

Radar Quality Speed

Top

radar.quality.speed.top

Methods

Get Top Speed Test Autonomous Systems -> Envelope<{ meta, top_0 }>

get/radar/quality/speed/top/ases

Get the top autonomous systems by bandwidth, latency, jitter or packet loss, from the previous 90 days of Cloudflare Speed Test data.

Get Top Speed Test Locations -> Envelope<{ meta, top_0 }>

get/radar/quality/speed/top/locations

Get the top locations by bandwidth, latency, jitter or packet loss, from the previous 90 days of Cloudflare Speed Test data.

Radar

Ranking

radar.ranking

Methods

Get Domains Rank Time Series -> Envelope<{ meta, serie_0 }>

get/radar/ranking/timeseries_groups

Gets Domains Rank updates change over time. Raw values are returned.

Get Top Or Trending Domains -> Envelope<{ meta, top_0 }>

get/radar/ranking/top

Get top or trending domains based on their rank. Popular domains are domains of broad appeal based on how people use the Internet. Trending domains are domains that are generating a surge in interest. For more information on top domains, see https://blog.cloudflare.com/radar-domain-rankings/.

Radar Ranking

Domain

radar.ranking.domain

Methods

Get Domains Rank Details -> Envelope<{ details_0 }>

get/radar/ranking/domain/{domain}

Gets Domains Rank details. Cloudflare provides an ordered rank for the top 100 domains, but for the remainder it only provides ranking buckets like top 200 thousand, top one million, etc.. These are available through Radar datasets endpoints.

Radar

Search

radar.search

Methods

Search For Locations Autonomous Systems As And Reports -> Envelope<{ search }>

get/radar/search/global

Lets you search for locations, autonomous systems (ASes), and reports.

Radar

TCP Resets Timeouts

radar.tcp_resets_timeouts

Methods

Get TCP Resets And Timeouts Summary -> Envelope<{ meta, summary_0 }>

get/radar/tcp_resets_timeouts/summary

Percentage distribution by connection stage of TCP connections terminated within the first 10 packets by a reset or timeout, for a given time period.

Get TCP Resets And Timeouts Time Series -> Envelope<{ meta, serie_0 }>

get/radar/tcp_resets_timeouts/timeseries_groups

Percentage distribution by connection stage of TCP connections terminated within the first 10 packets by a reset or timeout, over time.

Radar

Traffic Anomalies

radar.traffic_anomalies

Methods

Get Latest Internet Traffic Anomalies -> Envelope<{ trafficAnomalies }>

get/radar/traffic_anomalies

Internet traffic anomalies are signals that might point to an outage. These alerts are automatically detected by Radar and then manually verified by our team. This endpoint returns the latest alerts.

Radar Traffic Anomalies

Locations

radar.traffic_anomalies.locations

Methods

Get Top Locations By Total Traffic Anomalies Generated -> Envelope<{ trafficAnomalies }>

get/radar/traffic_anomalies/locations

Internet traffic anomalies are signals that might point to an outage. These alerts are automatically detected by Radar and then manually verified by our team. This endpoint returns the sum of alerts grouped by location.

Radar

Verified Bots

radar.verified_bots

Radar Verified Bots

Top

radar.verified_bots.top

Methods

Get Top Verified Bots By HTTP Requests -> Envelope<{ meta, top_0 }>

get/radar/verified_bots/top/bots

Get top verified bots by HTTP requests, with owner and category.

Get Top Verified Bot Categories By HTTP Requests -> Envelope<{ meta, top_0 }>

get/radar/verified_bots/top/categories

Get top verified bot categories by HTTP requests, along with their corresponding percentage, over the total verified bot HTTP requests.