Radar
radar
AI
radar.ai
Methods
Retrieves the distribution of unique accounts by model.
Retrieves the distribution of unique accounts by task.
radar.ai.inference.timeseries_groups.summary
Methods
Retrieves the distribution of unique accounts by model over time.
Retrieves the distribution of unique accounts by task over time.
Annotations
radar.annotations
Methods
Retrieves the latest annotations.
radar.annotations.outages
Methods
Retrieves the latest Internet outages and anomalies.
Retrieves the number of outages by location.
AS112
radar.as112
Methods
Retrieves the AS112 DNS queries over time.
Methods
Retrieves the distribution of DNS queries to AS112 by DNSSEC (DNS Security Extensions) support.
Retrieves the distribution of DNS queries to AS112 by EDNS (Extension Mechanisms for DNS) support.
Retrieves the distribution of DNS queries to AS112 by IP version.
Retrieves the distribution of DNS queries to AS112 by protocol.
Retrieves the distribution of DNS queries to AS112 by type.
Retrieves the distribution of AS112 DNS requests classified by response code.
Methods
Retrieves the distribution of AS112 DNS queries by DNSSEC (DNS Security Extensions) support over time.
Retrieves the distribution of AS112 DNS queries by EDNS (Extension Mechanisms for DNS) support over time.
Retrieves the distribution of AS112 DNS queries by IP version over time.
Retrieves the distribution of AS112 DNS requests classified by protocol over time.
Retrieves the distribution of AS112 DNS queries by type over time.
Retrieves the distribution of AS112 DNS requests classified by response code over time.
Methods
Retrieves the top locations of DNS queries to AS112 with DNSSEC (DNS Security Extensions) support.
Retrieves the top locations of DNS queries to AS112 with EDNS (Extension Mechanisms for DNS) support.
Retrieves the top locations of DNS queries to AS112 for an IP version.
Retrieves the top locations by AS112 DNS queries.
Attacks
radar.attacks
Methods
Retrieves the distribution of layer 3 attacks by bitrate.
Retrieves the distribution of layer 3 attacks by duration.
Retrieves the distribution of layer 3 attacks by IP version.
Retrieves the distribution of layer 3 attacks by protocol.
Retrieves the distribution of layer 3 attacks by vector.
Methods
Retrieves the distribution of layer 3 attacks by bitrate over time.
Retrieves the distribution of layer 3 attacks by duration over time.
Retrieves the distribution of layer 3 attacks by targeted industry over time.
Retrieves the distribution of layer 3 attacks by IP version over time.
Retrieves the distribution of layer 3 attacks by protocol over time.
Retrieves the distribution of layer 3 attacks by vector over time.
Retrieves the distribution of layer 3 attacks by targeted vertical over time.
Methods
Retrieves the top layer 3 attacks from origin to target location. Values are a percentage out of the total layer 3 attacks (with billing country). You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).
Retrieves the top industries targeted by layer 3 attacks.
Retrieves the top verticals targeted by layer 3 attacks.
Methods
Retrieves the origin locations of layer 3 attacks.
Retrieves the target locations of layer 3 attacks.
Methods
Retrieves the distribution of layer 7 attacks by HTTP method.
Retrieves the distribution of layer 7 attacks by HTTP version.
Retrieves the distribution of layer 7 attacks by IP version.
Retrieves the distribution of layer 7 attacks by managed rules.
Retrieves the distribution of layer 7 attacks by mitigation product.
Methods
Retrieves the distribution of layer 7 attacks by HTTP method over time.
Retrieves the distribution of layer 7 attacks by HTTP version over time.
Retrieves the distribution of layer 7 attacks by targeted industry over time.
Retrieves the distribution of layer 7 attacks by IP version used over time.
Retrieves the distribution of layer 7 attacks by managed rules over time.
Retrieves the distribution of layer 7 attacks by mitigation product over time.
Retrieves the distribution of layer 7 attacks by targeted vertical over time.
Methods
Retrieves the top attacks from origin to target location. Values are percentages of the total layer 7 attacks (with billing country). The attack magnitude can be defined by the number of mitigated requests or by the number of zones affected. You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).
Retrieves the industries targeted by layer 7 attacks.
Retrieves the verticals targeted by layer 7 attacks.
Methods
Retrieves the top origin autonomous systems of layer 7 attacks. Values are percentages of the total layer 7 attacks, with the origin autonomous systems determined by the client IP address.
Methods
Retrieves the top origin locations of layer 7 attacks. Values are percentages of the total layer 7 attacks, with the origin location determined by the client IP address.
Retrieves the top target locations of and by layer 7 attacks. Values are a percentage out of the total layer 7 attacks. The target location is determined by the attacked zone's billing country, when available.
BGP
radar.bgp
Methods
Retrieves BGP updates over time. When requesting updates for an autonomous system, only BGP updates of type announcement are returned.
Methods
Retrieves all ASes in the current global routing tables with routing statistics.
Retrieves all Multi-Origin AS (MOAS) prefixes in the global routing tables.
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
Example: Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
User Details Write User Details Read
Format in which results will be returned.
Lookup only RPKI invalid MOASes.
Lookup MOASes originated by the given ASN.
Network prefix, IPv4 or IPv6.
Retrieves the prefix-to-ASN mapping from global routing tables.
Retrieves the BGP routing table stats.
Methods
Retrieves the top autonomous systems by BGP updates (announcements only).
Retrieves the full list of autonomous systems on the global routing table ordered by announced prefixes count. The data comes from public BGP MRT data archives and updates every 2 hours.
Datasets
radar.datasets
Methods
Retrieves an URL to download a single dataset.
Retrieves the CSV content of a given dataset by alias or ID. When getting the content by alias the latest dataset is returned, optionally filtered by the latest available at a given date.
Retrieves a list of datasets.
DNS
radar.dns
Methods
Retrieves the top autonomous systems by DNS queries made to 1.1.1.1 DNS resolver.
Retrieves the top locations by DNS queries made to 1.1.1.1 DNS resolver.
radar.email
Domain types
Methods
Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation.
Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation.
Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation.
Retrieves the distribution of emails by encryption status (encrypted vs. not-encrypted).
Retrieves the distribution of emails by IP version.
Retrieves the distribution of emails by SPF (Sender Policy Framework) validation.
Methods
Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation over time.
Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation over time.
Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation over time.
Retrieves the distribution of emails by encryption status (encrypted vs. not-encrypted) over time.
Retrieves the distribution of emails by IP version over time.
Retrieves the distribution of emails by SPF (Sender Policy Framework) validation over time.
Methods
Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation.
Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation.
Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation.
Retrieves the distribution of emails by malicious classification.
Retrieves the proportion of emails by spam classification (spam vs. non-spam).
Retrieves the distribution of emails by SPF (Sender Policy Framework) validation.
Retrieves the proportion of emails by spoof classification (spoof vs. non-spoof).
Retrieves the distribution of emails by threat categories.
Retrieves the distribution of emails by TLS version.
Methods
Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation over time.
Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation over time.
Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation over time.
Retrieves the distribution of emails by malicious classification over time.
Retrieves the distribution of emails by spam classification (spam vs. non-spam) over time.
Retrieves the distribution of emails by SPF (Sender Policy Framework) validation over time.
Retrieves the distribution of emails by spoof classification (spoof vs. non-spoof) over time.
Retrieves the distribution of emails by threat category over time.
Retrieves the distribution of emails by TLS version over time.
Entities
radar.entities
Methods
Retrieves IP address information.
Methods
Retrieves the requested autonomous system information. (A confidence level below 5
indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this AS). Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).
Retrieves the requested autonomous system information based on IP address. Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).
Retrieves a list of autonomous systems.
Retrieves AS-level relationship for given networks.
Methods
Retrieves the requested location information. (A confidence level below 5
indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this location).
Retrieves a list of locations.
HTTP
radar.http
Methods
Retrieves the HTTP requests over time.
Methods
Retrieves the distribution of bot-generated HTTP requests to genuine human traffic, as classified by Cloudflare. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.
Retrieves the distribution of HTTP requests generated by mobile, desktop, and other types of devices.
Retrieves the distribution of HTTP requests by HTTP protocol (HTTP vs. HTTPS).
Retrieves the distribution of HTTP requests by HTTP version.
Retrieves the distribution of HTTP requests by IP version.
Retrieves the distribution of HTTP requests by operating system (Windows, macOS, Android, iOS, and others).
Retrieves the distribution of HTTP requests by post-quantum support.
Retrieves the distribution of HTTP requests by TLS version.
Methods
Retrieves the distribution of HTTP requests classified as automated or human over time. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.
Retrieves the distribution of HTTP requests by user agent over time.
Retrieves the distribution of HTTP requests by user agent family over time.
Retrieves the distribution of HTTP requests by device type over time.
Retrieves the distribution of HTTP requests by HTTP protocol (HTTP vs. HTTPS) over time.
Retrieves the distribution of HTTP requests by HTTP version over time.
Retrieves the distribution of HTTP requests by IP version over time.
Retrieves the distribution of HTTP requests by operating system over time.
Retrieves the distribution of HTTP requests by post-quantum support over time.
Retrieves the distribution of HTTP requests by TLS version over time.
Methods
Retrieves the top user agents by HTTP requests.
Retrieves the top user agents, aggregated in families, by HTTP requests.
Netflows
radar.netflows
Methods
Retrieves the distribution of network traffic (NetFlows) by HTTP vs other protocols.
Retrieves network traffic (NetFlows) over time.
Methods
Retrieves the top autonomous systems by network traffic (NetFlows).
Retrieves the top locations by network traffic (NetFlows).
Quality
radar.quality
Methods
Retrieves a summary (percentiles) of bandwidth, latency, or DNS response time from the Radar Internet Quality Index (IQI).
Retrieves a time series (percentiles) of bandwidth, latency, or DNS response time from the Radar Internet Quality Index (IQI).
Methods
Retrieves a histogram from the previous 90 days of Cloudflare Speed Test data, split into fixed bandwidth (Mbps), latency (ms), or jitter (ms) buckets.
Retrieves a summary of bandwidth, latency, jitter, and packet loss, from the previous 90 days of Cloudflare Speed Test data.
Methods
Retrieves the top autonomous systems by bandwidth, latency, jitter, or packet loss, from the previous 90 days of Cloudflare Speed Test data.
Retrieves the top locations by bandwidth, latency, jitter, or packet loss, from the previous 90 days of Cloudflare Speed Test data.
Ranking
radar.ranking
Methods
Retrieves domains rank over time.
Retrieves the top or trending domains based on their rank. Popular domains are domains of broad appeal based on how people use the Internet. Trending domains are domains that are generating a surge in interest. For more information on top domains, see https://blog.cloudflare.com/radar-domain-rankings/.
Methods
Retrieves domain rank details. Cloudflare provides an ordered rank for the top 100 domains, but for the remainder it only provides ranking buckets like top 200 thousand, top one million, etc.. These are available through Radar datasets endpoints.
Methods
Retrieves Internet Services rank update changes over time.
Retrieves top Internet services based on their rank.
Robots TXT
radar.robots_txt
radar.robots_txt.top
Methods
Retrieves the top domain categories by the number of robots.txt files parsed.
radar.robots_txt.top.user_agents
Methods
Retrieves the top user agents on robots.txt files.
Search
radar.search
Methods
Searches for locations, autonomous systems, and reports.
TCP Resets Timeouts
radar.tcp_resets_timeouts
Methods
Retrieves the distribution of connection stage by TCP connections terminated within the first 10 packets by a reset or timeout.
Retrieves the distribution of connection stage by TCP connections terminated within the first 10 packets by a reset or timeout over time.
Traffic Anomalies
radar.traffic_anomalies
Methods
Retrieves the latest Internet traffic anomalies, which are signals that might indicate an outage. These alerts are automatically detected by Radar and manually verified by our team.
radar.traffic_anomalies.locations
Methods
Retrieves the sum of Internet traffic anomalies, grouped by location. These anomalies are signals that might indicate an outage, automatically detected by Radar and manually verified by our team.
Verified Bots
radar.verified_bots
radar.verified_bots.top
Methods
Retrieves the top verified bots by HTTP requests, with owner and category.
Retrieves the top verified bot categories by HTTP requests, along with their corresponding percentage, over the total verified bot HTTP requests.